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Foreword 



rd , 



This Technical Specification has been produced by the 3 Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 
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Scope 



The present document defines the interface between the Subscriber Identity Module (SIM) and the Mobile Equipment 
(ME), and mandatory ME procedures, specifically for "SIM Application Toolkit". 

SIM Application Toolkit is a set of commands and procedures for use during the network operation phase of GSM, in 
addition to those defined in TS 11.11 [20] . 

Specifying the interface is to ensure interoperability between a SIM and an ME independently of the respective 
manufacturers and operators. The concept of a split of the Mobile Station (MS) into these elements as well as the 
distinction between the GSM network operation phase, which is also called GSM operations, and the administrative 
management phase are described in TS 02.17 [3]. 

The present document defines: 
the commands; 
the application protocol; 
the mandatory requirements on the SIM and ME for each procedure. 

Unless otherwise stated, references to GSM also apply to DCS 1800. 

The present document does not specify any aspects related to the administrative management phase. Any internal 
technical realization of either the SIM or the ME are only specified where these reflect over the interface. This standard 
does not specify any of the security algorithms which may be used. 

The present document defines an enhancement for GSM Phase 2+ of the SIM/ME interface for GSM Phase 2. While all 
attempts have been made to maintain phase compatibility, any issues that specifically relate to Phase 1 should be 
referenced from within the relevant Phase 1 specification. 
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• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including 
a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same 
Release as the present document. 

[1] not used 

[2] 3GPP TS 01.04: "Abbreviations and acronyms". 

[3] 3GPP TS 02. 17: "Subscriber Identity Modules (SIM) Functional characteristics". 
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[7] 3GPP TS 23.041: "Technical realization of Short Message Service Cell Broadcast (SMSCB)". 

[8] 3GPP TS 04.08: "Mobile radio interface layer 3 specification". 

[9] 3GPP TS 24.01 1 : "Point-to-Point (PP) Short Message Service (SMS) support on mobile radio 

interface". 
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[10] 3GPP TS 24.080: "Mobile radio interface layer 3 supplementary services specification; Formats 

and coding". 
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[13] GSM 09.91: "Digital cellular telecommunications system; Interworking aspects of the Subscriber 

Identity Module - Mobile Equipment (SIM - ME) interface between Phase 1 and Phase 2". 
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interface". 
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[26] 3GPP TS 22.042: "Network identity and timezone; Service description; Stage 1"". 
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3 Definitions, abbreviations and symbols 

3.1 Definitions 

For the purposes of the present document, the following terms and definitions apply. 

application: An application consists of a set of security mechanisms, files, data and protocols (excluding transmission 
protocols). 

application protocol: The set of procedures required by the application. 

bearer independent protocol: Mechanism by which the ME provides the SIM with access to the data bearers 
supported by the ME and the network. 

card session: A link between the card and the external world starting with the ATR and ending with a subsequent reset 
or a deactivation of the card. 

card x: Additional card. 

card reader x: Electrical interface to support additional card. 

data channel: allow the SIM and the network to exchange data using a selected bearer. 

data object: Information seen at the interface for which are defined a tag (identifier), a length and a value. Data objects 
can be either BER-TLV (objects that conform to the Basic Encoding Rules of ASN.l) or SIMPLE -TLV. In this 
specification, all BER-TLV data objects are "primitive": the value part consists only of SIMPLE-TLV data objects. 

link: Radio Resource. 

padding: One or more bits appended to a message in order to cause the message to contain the required number of bits 
or bytes. 

proactive SIM: A SIM which is capable of issuing commands to the ME within the T=0 protocol. 

proactive SIM session: Sequence of related SIM application toolkit commands and responses. A proactive SIM session 
starts with the status response '91 xx' (proactive command pending) and ends with a status response of '90 00' (normal 
ending of command) after Terminal Response. 

Rx buffer: A dedicated memory used to temporarily store data to be retrieved. 

Service data unit (SDU): In layered systems, a set of data that is sent by a user of the services of a given layer , and is 
transmitted to a peer service user semantically unchanged. A Protocol Control Information (PCI) header is attached to 
the Service Data Unit (SDU) by the layer to form a Protocol Data Unit (PDU). 

SIM application session: The execution of a sequence of commands internal to the SIM that can result in the 
performance of one or several proactive SIM sessions. The SIM application session can be started by any event in the 
card session, and can execute for the duration of the card session. Processing of the SIM application session will not 
interfere with normal GSM operation. 

SIM Application Toolkit: A set of applications and related procedures which may be used during a GSM session. 

Tx buffer: A dedicated memory used to temporarily store data to be sent. 
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3.2 



Abbreviations 



For the purposes of the present document, the following abbreviations apply, in addition to those listed in TS 01.04 [2]: 

A3 Algorithm 3, authentication algorithm; used for authenticating the subscriber 

A5 Algorithm 5, cipher algorithm; used for enciphering/deciphering data 

A8 Algorithm 8, cipher key generator; used to generate K^, 

A3 8 A single algorithm performing the functions of A3 and A8 

ADN Abbreviated Dialling Number 

APDU Application Protocol Data Unit 

ATR Answer To Reset 

BCD Binary Coded Decimal 

BDN Barred Dialling Number 

BER Basic Encoding Rules of ASN.l 

C-APDU Command Application Protocol Data Unit 

CB Cell Broadcast 

CBMI Cell Broadcast Message Identifier 

CCP Capability/Configuration Parameter 

CSD Circuit Switched Data 

DCS Digital Cellular System 

DTMF Dual Tone Multiple Frequency 

EF Elementary File 

EGPRS EDGE General Packet Radio Service 

ETSI European Telecommunications Standards Institute 

etu elementary time unit 

FDN Fixed Dialling Number 

GGSN Gateway GPRS Support Node 

GPRS General Packet Radio Service 

GSM Global System for Mobile communications 

ID IDentifier 

lEC International Electrotechnical Commission 

IMEI International Mobile Equipment Identity 

IMSI International Mobile Subscriber Identity 

ISO International Organization for Standardization 

Kc Cryptographic key; used by the cipher A5 

Ki Subscriber authentication key; the cryptographic key used by the authentication algorithm, A3, and 

cipher key generator, A8 

Igth The (specific) length of a data unit 

LND Last Number Dialled 

ME Mobile Equipment 

MMI Man Machine Interface 

MS Mobile Station 

NMR Network Measurement Results (see also TS 04.08 [8]) 

NPI Numbering Plan Identifier 

PDN Packet Data Network 

PDP Packet Data Protocol, e.g., Ip or X25 or PPP 

PDU Protocol Data Unit 

R-APDU Response Application Protocol Data Unit 

RAND A RANDom challenge issued by the network 

RFU Reserved for Future Use 

SAT SIM AppUcation Toolkit 

SDU Service Data Unit 

SIM Subscriber Identity Module 

SMS Short Message Service 

SRES Signed RESponse calculated by a SIM 

SS Supplementary Service 

SSC Supplementary Service Control string 

SW1/SW2 Status Word 1 / Status Word 2 

TCP Transmission Control Protocol 

TE Terminal Equipment (e.g. an attached personal computer) 

TLV Tag, length, value 
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TON 

TP 

TS 

UDP 

UCS2 

URL 

USSD 



Type Of Number 

Transfer layer Protocol 

Technical Specification 

User Datagram Protocol 

Universal two byte coded Character Set 

Universal Resource Locator 

Unstructured Supplementary Service Data 



3.3 Symbols 



'0' to '9' and 'A' to 'F' The sixteen hexadecimal digits. 



4 Overview of SIM Application Toolkit 

The SIM Application Toolkit provides mechanisms which allow applications, existing in the SIM, to interact and 
operate with any ME which supports the specific mechanism(s) required by the application. 

If class "a" is supported, a SIM supporting SIM Application Toolkit shall be able to communicate with the additional 
card(s) and get information about the additional reader(s) via the ME. 

The following mechanisms have been defined. These mechanisms are dependent upon the commands and protocols 
relevant to SIM AppUcation Toolkit in TS 11.11 [20]. 



4.1 



Profile Download 



Profile downloading provides a mechanism for the ME to tell the SIM what it is capable of. The ME knows what the 
SIM is capable of through the SIM Service Table and EFpjj^gg. 



4.2 



Proactive SIM 



Proactive SIM gives a mechanism whereby the SIM can initiate actions to be taken by the ME. These actions include: 

displaying text from the SIM to the ME; 

sending a short message; 

setting up a voice call to a number held by the SIM; 

setting up a data call to a number and bearer capabilities held by the SIM; 

sending a SS control or USSD string; 

- playing tone in earpiece; 
initiating a dialogue with the user; 

SIM initialization request and notification of changes to EF(s); 

- providing local information from the ME to the SIM; 
communicating with the additional card(s) (if class "a" is supported); 

- providing information about the additional card reader(s) (if class "a" is supported); 
managing timers running physically in the ME; 

- running an AT command received from the SIM, and returning the result to the SIM (if class "b" is supported); 

- sending DTMF; 

- requesting the ME to launch the browser corresponding to a URL. (if class "c" is supported); 
establishing and managing a bearer independent protocol (if class "e" is supported). 

For each command involved in the dialog with the user, a help information may be available, either for each item of a 
list of items proposed to the user, or with each command requesting a response from the user. If a proactive command 
involved in the dialog with the user indicates the availability of the help feature, the support of this feature is optional 
for the ME. 
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4.3 Data download to SIM 

Data downloading to the SIM uses either dedicated commands (the transport mechanisms of SMS point-to-point and 
Cell Broadcast) or the Bearer independent protocol. Transferral of information over the SIM-ME interface uses the 
ENVELOPE command. 

4.4 Menu selection 

A set of possible menu entries is supplied by the SIM in a proactive SIM command. The menu selection mechanism is 
used to transfer the SIM application menu item which has been selected by the user to the SIM. The menu selection 
mechanism may also be used for requesting help information on the items of the SIM application menu. 

4.5 Call control by SIM 

When this service is activated by the SIM, all dialled digit strings, supplementary service control strings and USSD 
strings are first passed to the SIM before the ME sets up the call, the supplementary service operation or the USSD 
operation. The ME shall also pass to the SIM at the same time its current serving cell. The SIM has the ability to allow, 
bar or modify the call, the supplementary service operation or the USSD operation. The SIM also has the ability to 
replace a call request, a supplementary service operation or a USSD operation by another call request or supplementary 
service operation or USSD operation. For example, a call request can be replaced by a supplementary service operation 
or a USSD operation, and vice-versa. 

4.6 MO Short Message control by SIM 

When this service is activated by the SIM, all MO short messages are first passed to the SIM before the ME sends the 
short message. The ME shall also pass to the SIM at the same time its current serving cell. The SIM shall have the 
ability to allow the sending, bar the sending or modify the destination address of the short message before sending it. 

4.7 Event download 

A set of events to monitor for is supplied by the SIM in a proactive SIM command. The event download mechanism is 
used to transfer details of the event to the SIM, when it occurs. Events that the ME can report to the SIM include 
incoming calls, location status, and availability of the screen for applications. 



4.8 Security 



Applications designed using the features in this specification may require methods to ensure data confidentiality, data 
integrity, and data sender validation, or any subset of these. Requirements for these mechanisms are defined in 
clause 15. 

4.9 Multiple card 

This subclause applies only if class "a" is supported. 

One event and a set of proactive commands are supplied to monitor and control Card x behaviour. 



4.10 Timer Expiration 



The SIM is able to manage timers running physically in the ME with a proactive command. The Timer Expiration 
mechanism is used to inform the SIM when a timer expires. 

4.1 1 Bearer Independent Protocol 

This subclause applies if class "e" is supported. 
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The set of proactive commands (OPEN CHANNEL, CLOSE CHANNEL, SEND DATA, RECEIVE DATA and GET 
CHANNEL STATUS) and events (Data available, Channel status) allows the SIM to establish a data channel with the 
ME, and through the ME to a remote Server in the Network. The SIM provides information for the ME to select an 
available bearer at the time of channel establishment. The ME then allows the SIM and the Server to exchange data on 
this channel, transparently. The SIM uses service of ME lower layer to send data by providing Service Data Unit to ME. 
The default lower layer is the higher layer of selected bearer. 



Profile download 



5.1 



Procedure 



The profile download instruction is sent by the ME to the SIM as part of the SIM initialization procedure. This 
procedure is specified in TS H . 1 1 [20]. In this procedure, the ME reads EFpjj^3£. If EFpj^^5£ indicates that the SIM 
requires the ME to perform the profile download procedure, then the ME shall, after having performed the CHVl 
verification procedure and before selecting EFimsi or EFloci^ send the TERMINAL PROFILE command, as specified 
below, to the SIM. The profile sent by the ME shall state the facilities relevant to SIM Application Toolkit that are 
supported by the ME. 

This procedure is important, as it is by this that the SIM knows what the ME is capable of, and the SIM can then limit 
its instruction range accordingly. If no command is sent by the ME, the SIM shall assume that the ME does not support 
SIM Application Toolkit. 

5.2 Structure and coding of TERMINAL PROFILE 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 



Description 


Section 


IVI/0 


Length 


Profile 


- 


M 


igth 



Profile: 

Contents: The list of SIM Application Toolkit facilities that are supported by the ME. 

Coding: 

1 bit is used to code each facility: 

bit = 1 : facility supported by ME 

bit = 0: facility not supported by ME 

First byte (Download): 



b8 b7 b 



b5 b4 b3 b2 bl 



Profile download 

SMS-PP data download 

Cell Broadcast data download 

Menu selection 

'9EXX' response code for SIM data download error 

Timer expiration 

USSD string data object supported in Call Control 

Envelope Call Control always sent to the SIM during 

automatic redial mode 
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Second byte (Other): 



b8 b7 b 



b5 b4 b3 b2 bl 



Command result 

Call Control by SIM 

Cell identity included in Call Control by SIM 

MO short message control by SIM 

Handling of the alpha identifier according to 

subclause 9.1.3 

UCS2 Entry supported 

UCS2 Display supported 

Display of the extension text 



Third byte (Proactive SIM): 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 




SIM 
SIM 
SIM 
SIM 
SIM 
SIM 
SIM 
SIM 


















L 


Proactive 
Proactive 


DISPLAY TEXT 
GET INKEY 






Proactive 


GET INPUT 






Proactive 


MORE TIME 






Proactive 


PLAY TONE 






Proactive 


POLL INTERVAL 






Proactive 


POLLING OFF 








Proactive 


REFRESH 



Fourth byte (Proactive SIM): 



b8 b7 b 



b5 b4 b3 b2 bl 



Proactive SIM 
Proactive SIM 
Proactive SIM 
Proactive SIM 
Proactive SIM 
Proactive SIM 
Proactive SIM 
LAC, Cell ID S 
Proactive SIM: 



SELECT ITEM 

SEND SHORT MESSAGE 

SEND SS 

SEND USSD 

SET UP CALL 

SET UP MENU 

PROVIDE LOCAL INFORMATION 

IMEI) 

PROVIDE LOCAL INFORMATION 



(MCC, MNC, 
(NMR) 



Fifth byte (Event driven information): 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 
































1 


Proac 






Event 










Event 












Event 














Event 
















Event 


















Event 




















Event 



Lve SIM: SET UP EVENT LIST 
MT call 

Call connected 
Call disconnected 
Location status 
User activity 
Idle screen available 
Card reader status 



Sixth byte (Event driven information extensions): 



b8 b7 b6 b5 b4 b3 b2 bl 



Event: Language selection 
Event : Browser Termination 
Event : Data available 
Event : Channel status 
RFU, bit = 
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Seventh byte (Multiple card proactive commands) for class "a" 



b8 b7 b 



b5 b4 b3 b2 bl 



Proactive SIM 
Proactive SIM 
Proactive SIM 
Proactive SIM 
status) 

Proactive SIM 
identifier) 
RFD, bit = 



POWER ON CARD 
POWER OFF CARD 
PERFORM CARD APDU 
GET READER STATUS 

GET READER STATUS 



(Card reader 
(Card reader 



Eighth byte (Proactive SIM): 



b8 b7 b6 b5 b 



b3 b2 bl 



Proactive SIM: TIMER MANAGEMENT (start, stop) 
Proactive SIM: TIMER MANAGEMENT (get current value) 
Proactive SIM: PROVIDE LOCAL INFORMATION (date, 

time and time zone) 
Binary choice in GET INKEY 
SET UP IDLE MODE TEXT 

RUN AT COMMAND (i.e. class "b" is supported) 
2nd alpha identifier in SET UP CALL 
2nd capability configuration parameter (see 9.1.6) 



Ninth byte: 



b8 b7 b6 b5 b4 b3 b2 bl 



Sustained 
SEND DTMF 
Proactive 

Channel 
Proactive 
Proactive 

Advance) 
Proactive 
Proactive 
RFU, bit = 



DISPLAY 
command 



TEXT (see 6. 
(see 6.4.24) 



4.1) 



SIM: 
List 

SIM: 
SIM: 

SIM: 

SIM: 





PROVIDE LOCAL INFORMATION - BCCH 
coding as in subclause 12.29) 
PROVIDE LOCAL INFORMATION (language) 
PROVIDE LOCAL INFORMATION (Timing 

LANGUAGE NOTIFICATION 
LAUNCH BROWSER 



Tenth byte (Soft keys support): 



b8 b7 b6 b5 b 



b3 b2 bl 



Soft keys support for SELECT ITEM (see 6.4.9) 
Soft Keys support for SET UP MENU (see 6.4.8) 



RFU, 


bit = 


= 


RFU, 


bit = 


= 


RFU, 


bit = 


= 


RFU, 


bit = 


= 


RFU, 


bit = 


= 


RFU, 


bit = 


= 



Eleventh byte (Soft keys information): 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 

























Maximum number of soft keys available 
' FF ' value is reserved for future use 



Twelfth byte (Bearer Independent protocol proactive commands (class "e"): 



b8 b7 b 



b5 b4 b3 b2 bl 



Proactive SIM 
Proactive SIM 
Proactive SIM 
Proactive SIM 
Proactive SIM 
'rfu, bit = 
'rfu, bit = 
'rfu, bit = 



OPEN CHANNEL 
CLOSE CHANNEL 
RECEIVE DATA 
SEND DATA 
GET CHANNEL STATUS 
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Thirteenth byte (Bearer Independent protocol supported bearers (class "e"): 



b8 b7 b6 b5 b4 b3 b2 bl 



CSD supported by ME 

GPRS supported by ME 

RFU, bit = 
'rFU, bit = 
'rFU, bit = 

Number of channels supported by ME 



Fourteenth byte (Screen height): 



b8 



b7 



b6 



b5 



b4 



b3 



b2 



bl 



Number of characters supported down the ME display 

as defined in 5.3.1 

RFU, bit = 

Screen Sizing Parameters supported as defined in 

section 5.3 



Fifteenth byte (Screen width): 



bS 


b7 


b6 


b5 


b4 


b3 


b2 


bl 

































Number of characters supported across the ME 
display as defined in 5.3.2 
Variable size fonts Supported 



Sixteenth byte (Screen effects): 



b8 b7 b6 b5 b4 b3 b2 bl 



Display can be resized as defined in 5.3.3 

Text Wrapping supported as defined in 5.3.4 

Text Scrolling supported as defined in 5.3.5 

RFU 

RFU 

Width reduction when in a menu as defined in 5.3.6 



Seventeenth byte: (Bearer independent protocol supported transport interface) for class "e": 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 


TCP 
UDP 


bit = 






















L 
















RFU, 


= 



Eighteenth byte: (Reserved): 



b8 



b7 



b6 



b5 



b4 



b3 



b2 



bl 



RFU, bit = 



Nineteenth byte: (reserved for TIA/EIA-136 facilities): 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 













































Protocol Version, coded as indicated 
in TIA/EIA-136-123 [35] 
RFU, bit = 



Subsequent bytes: 



b8 



b7 



b6 



b5 



b4 



b3 



b2 



bl 



RFU, bit = 



RFU bits, and all bits of subsequent bytes, are reserved to indicate future facilities. A SIM supporting only the 
features of SIM Application Toolkit defined in the present document shall not check the value of RFU bits. 
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Response parameters/data: None. 

5.3 Definition of display parameters in Profile download 

This subclause defines the terms used for defining the passing of the ME's screen parameters from the ME to the SIM. 

5.3.1 Number of characters supported down the IVIE display 

This is the guaranteed number of characters supported down the ME display without scrolling (using the default 
character set specified in TS 23.038 [5]) as a result of a Display Text Proactive command. 

If the screen resized as defined in 5.3.3 then this value shall be the initial number of characters supported before the 
display can be resized. 

5.3.2 Number of characters supported across the IVIE display 

This is the guaranteed number of characters supported across the ME display without scrolling (using the default 
character set specified in TS 23.038 [5]) as a result of a Display Text Proactive command that can be viewed in one 
instance. 

If the screen resized as defined in 5.3.3 then this value shall be the initial number of characters supported before the 
display can be resized. 

5.3.3 Display can be resized 

Display can be resized is supported if either: 

The user can change the number of characters supported across the display, down the display or both. 

The ME can dynamically change the number of characters supported across the display, down the display or 
both. 

5.3.4 Text Wrapping 

Text wrapping is supported if the ME puts words that would be split across two lines, due to the display size, at the 
beginning of the next line down. 

5.3.5 Text Scrolling 

Text scrolling is supported if the ME scrolls, on one line, words that would be split across two lines, due to the display 

size. 

5.3.6 Width reduction when in a menu 

This value is the number of characters available across the display due to a DISPLAY TEXT proactive command 
without scrolling (using the default character set specified in TS 23.038 [5]) minus the number of characters available 
across the display due to a SELECT ITEM proactive command without scrolling (using the default character set 
specified in TS 23.038 [5]). 

If the screen resized as defined in 5.3.3 then this value shall be calculated using the initial number of characters 
supported before the display can be resized. 
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6 Proactive SIM 

6.1 Introduction 

TS 11.11 [20] defines that the ME communicates to the SIM using the T=0 protocol, which is specified in 
ISO/IEC 7816-3 [16]. The ME is always the "master" and initiates commands to the SIM, and therefore there is no 
mechanism for the SIM to initiate a communication with the ME. This limits the possibility of introducing new SIM 
features requiring the support of the ME, as the ME needs to know in advance what actions it should take. 

The SIM shall execute all SIM Application Toolkit Proactive commands or procedures in such a way as not to 
jeopardise, or cause suspension, of service provisioning to the user. This could occur if, for example, execution of the 
RUN GSM ALGORITHM is delayed by internal SIM Toolkit activity, which would result in the network denying or 
suspending service to the user. Specifically, the MORE TIME command shall be used, whenever possible, to allow the 
ME access to the GSM functionality of the SIM if Toolkit applications take an unreasonable time to complete 
execution. 

Note: The maximum delay before the sending of a MORE TIME command is required depends on several 

factors (e.g. the permissible duration of a network-SIM authentication); in some cases a maximal delay of 
2 seconds could be required. During this period the NULL procedure byte operation shall be respected as 
defined in TS 11.11 [20]. 

The proactive SIM service provides a mechanism which stays within the protocol of T=0, but adds a new status 
response word SWl. This status response has the same meaning as the normal ending ('90 00'), and can be used with 
most of the commands that allow the normal ending, but it also allows the SIM to say to the ME "I have some 
information to send to you". The ME then uses the FETCH function to find out what this information is. 

To avoid cross-phase compatibility problems, these functions shall only be used between a proactive SIM and an ME 
that supports the proactive SIM feature. 

The SIM can issue a variety of commands through this mechanism, given in alphabetical order: 

CLOSE CHANNEL, which requests the ME to close the specified data channel (if class "e" is supported). 

- DISPLAY TEXT, which displays text or an icon on screen. A high priority is available, to replace anything else 
on screen. 

GET CHANNEL STATUS, which requests the ME to return the current status of all available data channel(s) 
(if class "e" is supported). 

GET INKEY, which sends text or an icon to the display and requests a single character response in return. It is 
intended to allow a dialogue between the SIM and the user, particularly for selecting an option from a menu. 

GET INPUT, which sends text or an icon to the display and requests a response in return. It is intended to allow 
a dialogue between the SIM and the user. 

GET READER STATUS, which gives information about the additional reader(s) and inserted card(s) (Card x 
state, e.g. powered on or not. Card x Presence), if class "a" is supported. 

- LANGUAGE NOTIFICATION, which allows the SIM to notify the ME about the currently used language in 
text strings issued by the SIM Application Toolkit application. 

LAUNCH BROWSER, which requests a browser inside a browser enabled ME to interpret the content 
corresponding to a URL. 

- MORE TIME, which does not request any action from the ME. The ME is required to respond with 
TERMINAL RESPONSE (OK) as normal - see below. The purpose of the MORE TIME command is to provide 
a mechanism for the SIM Application Toolkit task in the SIM to request more processing time. 

OPEN CHANNEL, which requests the ME to open a data channel with parameters indicated in the command 
(if class "e" is supported.) 

- PERFORM CARD APDU, which requests the ME to send an APDU command to the additional card, if class 
"a" is supported. This command is compatible with any protocol between the ME and the additional card. 
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PLAY TONE, which requests the ME to play a tone in its earpiece, ringer, or other appropriate loudspeaker. 

- POLL INTERVAL, which negotiates how often the ME sends STATUS commands to the SIM during idle 
mode. Polling is disabled with POLLING OFF. Use of STATUS for the proactive SIM is described in 

TS n.ll [20]. 

POWER OFF CARD, which closes the session with the additional card, if class "a" is supported. 

POWER ON CARD, which initiates a session with the additional card and returns all the ATR bytes, if class 
"a" is supported. 

- PROVIDE LOCAL INFORMATION which requests the ME to pass local information to the SIM, for 
example the mobile country and network codes (MCC + MNC) of the network on which the user is registered. 

RECEIVE DATA, which requests the ME to return to the SIM data received on the specified channel (if class 
"e" is supported). 

REFRESH, which requests the ME to carry out a SIM initialization according to TS 11.11 subclause 12.2. 1, 
and/or advises the ME that the contents or structure of EFs on the SIM have been changed. The command also 
makes it possible to restart a card session by resetting the SIM. 

RUN AT COMMAND, which will convey an AT Command to the ME, and cause the response to the AT 
Command to be returned to the SIM. 

SELECT ITEM, where the SIM supplies a list of items, and the user is expected to choose one. The ME 
presents the list in an implementation-dependent way. 

SEND DATA, which requests the ME to send on the specified channel data provided by the SIM (if class "e" is 
supported). 

SEND DTMF, which requests the ME to send DTMF tone(s) during an established call. 

- SEND SHORT MESSAGE, which sends a short message or SMS-COMMAND to the network. 
SEND SS, which sends an SS request to the network. 

- SEND USSD, which sends a USSD string to the network. 

SET UP CALL, of which there are three types: 

set up a call, but only if not currently busy on another call; 
set up a call, putting all other calls (if any) on hold; 
set up a call, disconnecting all other calls (if any); 

SET UP EVENT LIST where the SIM supplies a list of events which it wants the ME to provide details of 
when these events happen. 

SET UP IDLE MODE TEXT, which supplies a text string to be used by the ME as stand-by mode text. 

SET UP MENU, where the SIM supplies a list of items to be incorporated into the ME's menu structure. 

TIMER MANAGEMENT, which requests the ME to manage a timer in a way described in the command (start, 
deactivate and get the current value) and, in the case of starting a timer, for a duration indicated in the command. 

The ME tells the SIM if the command was successful or not using the command result procedure defined in subclause 
6.7. Responsibility for what happens after that (whether to repeat the command, try another one immediately, try again 
sometime later, or not to try again at all) lies with the SIM application. However, the SIM application needs to know 
why the command failed, so the ME provides the SIM with the result of the command. 

Results are grouped into three main types: 

- OK. 

Temporary problem. These results are further broken down into types of temporary problems, and specific 
causes. Generally, they indicate to the SIM that it may be worth trying again. 

- Permanent problem. These results are again further broken down into types of permanent problems, and specific 
causes. Generally, they indicate to the SIM that it is not worth trying again during this GSM session. 
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If the SIM issues an instruction to the ME to initiate a Mobile Originated transaction (e.g. SEND SMS, SEND USSD or 
SEND DTMF), then unless explicitly stated elsewhere in the present document or in TS 11.11 [14], the content supplied 
by the SIM for onward transmission by the ME shall not be altered by the ME. 

6.2 Identification of proactive SIIVIs and of IVIE support 

A proactive SIM shall be identified by having the proactive SIM service activated in the SIM Service Table (see 
TS 11.11 [20]). An ME that supports proactive SIMs shall be identified as such when it sends a TERMINAL PROFILE 
command during SIM initialization. The ME shall then send STATUS commands to the SIM at intervals determined by 
the poll interval procedure (see subclause 6.4.6). 

A proactive SIM shall not send any command requests (status bytes SWl SW2 = '91 XX') to a mobile that does not 
support the proactive SIM feature. 

An ME that supports the proactive SIM feature shall not send proactive SIM related commands to a SIM that does not 
have the proactive SIM service activated. 

6.3 General procedure 

For all of the procedures that can end in '90 00' (indicating normal ending to the command), and which cannot end in 
'9F XX' (response data available from SIM), a proactive SIM operating with an ME that supports proactive SIMs may 
instead use the status response '91 XX'. 

The response code '91 XX' shall indicate to the ME that the previous command has been successfully executed by the 
SIM in the same way as '90 00' (i.e. "OK"), but additionally it shall indicate response data which contains a command 
from the SIM for a particular ME procedure (defined in subclause 6.4). 

The value 'XX' indicates the length of the response data. The ME shall use the FETCH command to obtain this data. 

It is the responsibility of the SIM to remind the ME of a pending proactive command by applying the '91 XX' 
returncode until it is fetched by the ME. 

Note: The last value of 'XX' received in a '91 XX' returncode from the SIM should be used by the ME in a 
following FETCH command. 

It is recommended that the ME interprets a '90 00' following a '91 XX' without a corresponding FETCH 
as if no proactive command is available in the SIM and regard the proactive SIM session as being 
terminated. However, the SIM should be able to handle a FETCH command being sent in this case, e.g. 
by applying the appropriate error handling (cf. "Handling of unknown, unforeseen and erroneous 
messages"). 

TS 11.11 [20] shows how the SIM can initiate a proactive command in each of the five cases of transmission protocol 
identified in TS 11.11 [20]. Some commands require the SIM to indicate that it has response data for the ME (through 
SW1/SW2 = '9F XX'), and the ME gets this data using the GET RESPONSE command. 

When the ME has received a command from the SIM, it shall attempt to process the command immediately. 

If the command has been successfully executed, the ME shall inform the SIM as soon as possible, using 
TERMINAL RESPONSE. 

If the command was not successfully executed, the ME shall inform the SIM as soon as possible using 
TERMINAL RESPONSE with an error condition. 

Responsibility for re-trying lies with the SIM application. The SIM application can make a judgement whether to send 
the same command again, to send a different one, or not to try again, from the information given by the ME in 
TERMINAL RESPONSE. If the SIM application wishes the ME to try again, it shall issue a new (identical) command. 

Only one proactive command can be ongoing at any one time. 
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6.4 Proactive SIM commands and procedures 

6.4.1 DISPLAY TEXT 

This command instructs the ME to display a text message, and/or an icon (see 6.5.4). It allows the SIM to define the 
priority of that message, and the text string format. 

Two types of priority are defined: 

display normal priority text and/or icon on screen; 
display high priority text and/or icon on screen. 

The text string can be in one of three formats: 

packed format in SMS default alphabet - (see 12.15.2); 
unpacked format in SMS default alphabet - (see 12.15.2); 
- UCS2 alphabet format - (see 12.15.3). 

Note: From release 98 onwards the text string may contain up to 240 bytes. 

A flag (see command qualifier, subclause 12.6) shall be set to inform the ME whether the availability of the screen for 
subsequent information display after its use for 'Display Text' should be either after a short delay (the duration of the 
delay being at the discretion of the ME manufacturer), or following a user MMI action. 

An immediate response object may be included by the SIM, to indicate if the ME should sustain the display beyond 
sending the TERMINAL RESPONSE. ME support of this feature is indicated in the PROFILE DOWNLOAD. The 
behaviour of non-supporting MEs is dependent on the Comprehension Required flag. 

If the user has indicated the need to end the proactive SIM application session, the ME shall send a TERMINAL 
RESPONSE with "Proactive SIM application session terminated by the user" result value. 

If the user has indicated the need to go backwards in the proactive SIM application session, the ME shall send a 
TERMINAL RESPONSE with "Backward move in the proactive SIM session requested by the user" result 
value. 

If a flag of the command qualifier (see subclause 12.6) indicates that the ME shall wait for the user to clear 
message and if the ME decides that no user response has been received, the ME shall send a TERMINAL 
RESPONSE with "No response from user" result value. 

- If the SIM includes an immediate response object, the ME shall immediately send TERMINAL RESPONSE 
(Command performed successfully). The ME shall continue to display the text until one of the following events 
occurs: 

a subsequent proactive command is received containing display data; 

the expiration of the short delay, if so indicated by the command qualifier; 

following a user MMI action; 

when a higher priority event occurs, e.g. an incoming mobile terminated call. 

No further TERMINAL RESPONSE shall be sent when the ME removes the text from the display, regardless of 
the cause. 

Otherwise, the ME shall send TERMINAL RESPONSE (Command performed successfully) at the expiration of 
the short delay, or following a user MMI action not described above. 

In each case the availability of the screen for the subsequent information display is defined in subclause 6.9. 

NOTE 2: For the case where the text is cleared after a short delay, the ME may also allow the user to clear the 
display via the MMI prior to this. 

The ME shall reject normal priority text commands if the screen is currently being used for more than its normal stand- 
by display. If the command is rejected, the ME informs the SIM using TERMINAL RESPONSE (ME currently unable 
to process command - screen busy). 

High priority text shall be displayed on the screen immediately, except if there is a conflict of priority level of alerting 
such as incoming calls or a low battery warning. In that situation, the resolution is left to the ME. If the command is 
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rejected in spite of the high priority, the ME shall inform the SIM using TERMINAL RESPONSE (ME currently unable 
to process command - screen is busy). 

If help information is requested by the user, this command may be used to display help information on the screen. The 
help information should be sent as high priority text and with the option that it should be cleared after a short delay. 

6.4.2 GET INKEY 

This command instructs the ME to display text and/or an icon (see 6.5.4) and to expect the user to enter a single 
character. Any response entered by the user shall be passed transparently by the ME to the SIM. 

The text can be in one of three formats: 

packed format in SMS default alphabet - (see 12.15.2); 
unpacked format in SMS default alphabet - (see 12.15.2); 
UCS2 alphabet format - (see 12.15.3). 

The response can be from one of three character sets. This is specified by the SIM: 

- digits only (0-9, *, #, and +); 

characters from the SMS default alphabet; 
characters from the UCS2 alphabet. 

Upon receiving the command, the ME shall display the text. The ME shall allow the user to enter a single character in 
response. 

If the user has indicated the need to go backwards in the proactive SIM session, the ME shall send a 
TERMINAL RESPONSE with "Backward move in the proactive SIM session requested by the user" result 
value. 

If the user has indicated the need to end the proactive SIM session, the ME shall send a TERMINAL 
RESPONSE with "Proactive SIM session terminated by the user" result value. 

If the ME decides that no user response has been received, the ME shall send a TERMINAL RESPONSE with 
"No response from user" result value. 

If the SIM requests a digit only, the ME shall only allow the user to enter a character from the digits 0-9, *, # and 
+. When the user has entered a digit, the ME shall pass the entered digit transparently to the SIM, using 
TERMINAL RESPONSE. 

If help information is available for the command and if the user has indicated the need to get help information, 
the ME shall send a TERMINAL RESPONSE with "help information required by the user" result value. 

If the SIM requests a character from the SMS default alphabet, the ME shall allow the user to enter a character 
using characters from this alphabet. When the user has entered a character, the ME shall pass the entered 
character transparently to the SIM, using TERMINAL RESPONSE. 

- If the SIM requests a "Yes/No" response, the ME shall allow the user to enter either a positive or a negative 

decision using MMI means left to ME manufacturer's choice (keypad, touch screen, softkey,...). The ME may use 
SEND, ACCEPT or END functions in relation to GET INKEY "Yes/No" response. If used, the SEND and 
ACCEPT functions as defined in TS 02.30 [4] shall mean positive decision and the END function as defined in 
TS 02.30 [4] shall mean a negative one. Depending on the user's choice, the ME shall pass the positive or a 
negative value to the SIM, using TERMINAL RESPONSE. 

NOTE: If the MMI of the ME requires more than one keypress in order to select a character, it is an 

implementation decision for the ME manufacturer how to indicate completion (e.g. timeout, pressing 
SEND, OK). It may be useful to echo the input character on the display. 

For digits only (0-9, *,# and +) and SMS default alphabet characters sets, the response shall be coded using the SMS 
default alphabet in unpacked format. 
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6.4.3 GET INPUT 

This command instructs the ME to display text and/or an icon (see 6.5.4) and that any response string entered by the 
user shall be passed transparently by the ME to the SIM and shall not be stored in the ME. If the SIM provides a default 
text, the ME shall display this default text, which the user may accept, reject or edit as the response string. 

The text can be in one of three formats: 

packed format in SMS default alphabet (see 12.15.2); 
unpacked format in SMS default alphabet (see 12.15.2); 
- UCS2 alphabet format (see 12.15.3). 

The SIM indicates how many characters are expected for the response string, by giving a minimum and a maximum 
acceptable length. 

The SIM specifies the following variables for the response string it is expecting from the user: 

the response contains either digits only (0-9, *, # and +) or characters from one of the possible alphabets; 
the response contains either characters coded in SMS default alphabet or characters coded in UCS2 alphabet; 
the response for digits only (0-9, *,# and +) or characters from SMS default alphabet is either in an unpacked 
format or in a packed format; 

the ME may display the text string being entered by the user (the response), or the ME shall hide (i.e. not 
display) the actual text string. 

The combination of characters from either the SMS default alphabet or the UCS2 alphabet and hidden entry mode is not 
allowed. In hidden entry mode, only digits from the set "0-9","*" and "#" are allowed for the user input. "+" is not 
allowed for user input in this mode. 

If the SIM requests that the user input (text string) is to be hidden, it is permissible for the ME to indicate the entry of 
characters, so long as the characters themselves are not revealed. 

Upon receiving the command, the ME shall display the text. The ME shall allow the user to enter characters in 
response. 

The ME MMI is responsible for managing the entry of the correct number of characters. 

If the user has indicated the need to go backwards in the proactive SIM session, the ME shall send a 
TERMINAL RESPONSE with "Backward move in the proactive SIM session requested by the user" result 
value. 

If the user has indicated the need to end the proactive SIM session, the ME shall send a TERMINAL 
RESPONSE with "Proactive SIM session terminated by the user" result value. 

If the ME decides that no user response has been received, the ME shall send a TERMINAL RESPONSE with 
"No response from user" result value. 

If the SIM requests digits only, the ME shall only allow the user to enter the digits 0-9, *, # and +. When the user 
has indicated completion, the ME shall pass the entered digit string transparently to the SIM, using TERMINAL 
RESPONSE. 

If the SIM requests characters from the UCS2 alphabet or SMS default alphabet, the ME shall allow the user to 
enter a character string using characters from one of these alphabets. When the user has indicated completion, 
the ME shall pass the entered text string transparently to the SIM, using TERMINAL RESPONSE. 

If help information is available for the command and if the user has indicated the need to get help information, 
the ME shall send a TERMINAL RESPONSE with 'help information required by the user' result value. 

If the SIM requests the user input to be in packed format, then the ME shall pack the text according to TS 23.038 [5] 
before submitting it to the SIM. 
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6.4.4 MORE TIME 

This procedure is provided to allow the SIM Application Toolkit task in the SIM more time for processing, where the 
processing is so long that it is in danger of affecting normal GSM operation, and clock stop prevents processing to take 
place in the background. 

The ME shall take no extraordinary action when it receives this command, and all other operations shall be unaffected. 
The ME shall conclude the command by sending TERMINAL RESPONSE (OK) to the SIM, as soon as possible after 
receiving the MORE TIME command. 

6.4.5 PLAY TONE 

This command instructs the ME to play an audio tone. 

Upon receiving this command, the ME shall check if it is currently in, or in the process of setting up (SET-UP message 
sent to the network, see TS 04.08 [8]), a speech call. 

If the ME is in, or is setting up a speech call, it shall superimpose the tone on top of the downlink audio (if any), 
for the duration given in the command. The progress or current state of the call shall not be affected in any way. 
The ME shall send the TERMINAL RESPONSE (Command performed successfully) as soon as possible after 
the tone has been completed and, if an alpha identifier was included and displayed, the screen is available for 
subsequent information display. 

If the ME is not in or setting up a speech call, it shall route the audio to the external ringer, or other appropriate 
audio device, and play the tone for the duration given in the command. The ME shall send the TERMINAL 
RESPONSE (Command performed successfully) as soon as possible after the tone has been completed and, if an 
alpha identifier was included and displayed, the screen is available for subsequent information display. 

If the user has indicated the need to end the proactive SIM application session while the ME plays the tone, the 
ME shall stop playing the tone and shall send a TERMINAL RESPONSE with "Proactive SIM application 
session terminated by the user" result value. 

If ME support for the specific tone requested is optional, and the ME does not support this particular tone, the 
ME shall inform the SIM using TERMINAL RESPONSE (Command beyond ME's capabilities). 

This proactive command contains no information on how a call is progressing; therefore the ME shall not generate any 
verbal indication or display any text or graphical indication about the normal meaning of this tone (e.g. display "called 
subscriber busy"). If the SIM wishes to convey a meaning in text to the user, it shall do this through the alpha identifier 
data object and/or an icon (see 6.5.4). 

The use of this alpha identifier by the ME is described below: 

If the alpha identifier is provided by the SIM and is not a null data object, the ME shall use it to inform the user. 
If an icon is provided by the SIM, the icon indicated in the command may be used by the ME to inform the user, 
in addition to, or instead of the alpha identifier, as indicated with the icon qualifier (see subclause 6.5.4). 

If the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), the 
ME should not give any information to the user. 

If the alpha identifier is not provided by the SIM, the ME may give information to the user concerning what is 
happening. 

If the ME is required to generate a supervisory tone due to the progress of the current call (e.g. the network sends the 
ME call control cause information) as defined in TS 02.40 [18], then the call supervisory tone shall take precedence 
over the tone requested by the SIM. 

6.4.6 POLL INTERVAL 

This procedure negotiates how often the ME shall send STATUS commands related to Proactive Polling (defined in 
TS 11.11 [20]). The SIM indicates the poll interval it requests from then onwards, and the ME responds through 
TERMINAL RESPONSE with the maximum interval that it will use. If the ME does not support the poll interval 
requested by the SIM, then the ME shall respond with the closest interval to the one requested by the SIM, or, if the 
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intervals the ME can offer are equidistant (higher and lower) from the SIM's request, the ME shall respond with the 
lower interval of the two. 

Applications on the SIM should not request short time intervals for an extended period, as this will have an adverse 
effect on battery life. 

6.4.7 REFRESH 

The purpose of this command is to enable the ME to be notified of the changes to the SIM configuration that have 
occurred as the result of a SIM application activity. It is up to the SIM application to ensure that this is done correctly. 

The command supports five different modes: 

SIM Initialization. This mode tells the ME to carry out SIM initialization as it is defined in TS 11.11 [20], 
starting after the CHVl verification procedure. The ME shall not reset the SIM electrically. 

File Change Notification. This mode advises the ME of the identity of the EFs that have been changed (in 
structure and/or contents) in the SIM. This information can be used by the ME if there is an image of SIM EFs 
(e.g. the ADN file) in the ME's memory, to determine whether it needs to update this image. 

SIM Initialization and File Change Notification. This is a combination of the first two modes above. 

SIM Initialization and Full File Change Notification. This mode causes the ME to perform the SIM initialization 
procedure of the first mode above and advises the ME that several EFs have been changed (in structure or 
contents) in the SIM. If there is an image of SIM EFs in the ME's memory, the ME shall completely update this 
image. 

SIM Reset. This mode causes the ME to run the GSM session termination procedure and to deactivate the SIM 
in accordance with TS 11.11 [20]. Subsequently, the ME activates the SIM again and starts a new card session. 
In case of a 3 Volt technology ME, the ME shall restart the SIM with the same supply voltage as in the previous 
session, if the ME can ensure that the SIM has not been changed in between. Otherwise, the ME shall perform 
the supply voltage switching in accordance with TS 11.12 [21]. The ME shall not send the TERMINAL 
RESPONSE; this is an exception from the normal procedure, where TERMINAL RESPONSE is sent after 
completion of the command. The SIM Application shall interpret a new activation of the contacts of the SIM as 
an implicit TERMINAL RESPONSE. The SIM Reset mode is used when a SIM application requires ATR or 
complete SIM initialization procedures to be performed. SIM Applications should take into account that early 
implementations of SIM Application Toolkit in some MEs may send a TERMINAL RESPONSE after 
performing the REFRESH command involving resetting the SIM electrically. 

If the ME performs the REFRESH command successfully for only those EFs indicated in the mode, the ME shall 
inform the SIM using TERMINAL RESPONSE (OK), after it has completed its refreshing. 

For REFRESH commands with mode other than "SIM Reset", it is permissible for the ME, as part of its execution of 
the REFRESH command, to read EFs in addition to those notified by the SIM, or to perform a SIM initialisation, 
provided that the procedure executed wholly encompasses the mode requested by the SIM. The ME shall not 
electrically reset the SIM. If the ME does the refreshing successfully, it shall inform the SIM using TERMINAL 
RESPONSE (Refresh performed with additional EFs read), after the ME has completed its refreshing. It should be 
noted that reading additional EFs will lengthen the refresh procedure. 

If the ME receives a REFRESH command while in a state where execution of the command would be unacceptable, 
upsetting the current user operation (e.g. notification during a call that the IMSI has changed), the ME shall inform the 
SIM using TERMINAL RESPONSE (ME currently unable to process command - currently busy on call) or 
TERMINAL RESPONSE (ME currently unable to process command - screen is busy) as appropriate. 

NOTE: Many MEs copy an image of the SIM's memory to the ME at initialization to speed up access to these 

fields during a GSM session. One of the purposes of this coding of the REFRESH command is to enable 
MEs to change such an image efficiently. 

If, on receipt of the REFRESH command, the ME replies that it is busy (e.g. in call or navigating menus), the toolkit 
application may shorten the polling interval utilising the POLL INTERVAL command in order to resend the REFRESH 
command more frequently. 

It is recommended for the ME to minimise the use of sending temporary problem TERMINAL RESPONSE, as during 
the period between the SIM issuing a REFRESH command and the ME performing the refresh procedure, there may be 
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inconsistencies between data held in the ME and in the SIM. However, responsibility for retrying of all pro-active 
commands lies with the SIM Application. 

6.4.7.1 EFiMsi changing procedure 

When EFiMsi is changed via Data Download or a SIM Toolkit application and a REFRESH command is issued by the 
SIM the following rules apply to the SIM Toolkit and ME: 

SIM Initialization. This command shall not be used if EF^^si is changed, as the behaviour of the MS is 
unpredictable. 

File Change Notification. This command shall not be used if EFimsi is changed, as the behaviour of the MS is 
unpredictable. 

SIM Initialization and File Change Notification. If EFimsi is part of the file change notification, the ME shall 
invoke the MM Restart procedure defined in 03.22 [28]. 

SIM Initialization and Full File Change Notification. The ME shall invoke the MM Restart procedure defined in 

03.22 [28]. 

SIM Reset. Normal SIM Reset procedure is carried out. 

If EFimsi is to be updated, neither EFimsi nor EFloci shall be updated in the SIM before the phase request procedure has 
been executed by the ME. 

6.4.8 SET UP MENU 

The SIM shall supply a set of menu items, which shall be integrated with the menu system (or other MMI facility) in 
order to give the user the opportunity to choose one of these menu items at his own discretion. Each item comprises a 
short identifier (used to indicate the selection), a text string and optionally an icon identifier, contained in an item icon 
identifier list data object located at the end of the list of items. 

The SIM shall include an alpha identifier, and optionally an icon identifier, which acts as a title for the list of menu 
items. This icon may be used by the ME to provide an entry into the list of toolkit menu items for the user. 

If an icon is provided by the SIM, the icon(s) indicated in the command may be used by the ME in addition to, or 
instead of the alpha identifier or text string, as indicated with the icon qualifier (see subclause 6.5.4). Additionally, if 
soft key preferred is indicated in the command details and soft key for SET UP MENU is supported by the ME and the 
number of icon items does not exceed the number of soft keys available, then the ME shall display those icons as soft 
key. 

The SIM may include an items next action indicator data object located at the end of the list of items. The inclusion of 
the items next action indicator is to allow the ME to indicate to the user the consequences of performing the selection of 
an item. 

NOTE: The maximum amount of data sent in one proactive SIM command is 256 bytes. It is therefore 

unavoidable that there is trade-off between the number of items and the length of the descriptive text (the 
alpha identifier of the SET-UP MENU command and the text strings of the items), e.g. for an average 
length of 10 bytes per text string the maximum amount of items is 18. 

The list of menu items shall then be part of the menu system of the ME and the user is allowed to select an item from 
this list. The presentation style is left as an implementation decision to the ME manufacturer. However, the ME shall 
present the menu items in the order given by the SIM, unless instructed otherwise by the user, or when this would be 
inappropriate for the presentation style of the ME. The menu provided by the SIM in the last SET UP MENU command 
shall no longer be part of the menu system of the ME if the ME is powered off or the SIM is removed or electrically 
reset. 

Any subsequent SET-UP MENU command replaces the current list of menu items supplied in the previous SET-UP 
MENU command. The SET-UP MENU command can also be used to remove a menu from the menu system in the ME; 
see subclause 6.6.7. 

When the ME has successfully integrated or removed the list of menu items, it shall send TERMINAL RESPONSE 
(OK) to the SIM. 
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When the ME is not able to successfully integrate or remove the list of menu items, it shall sent TERMINAL 
RESPONSE (Command beyond ME's capabilities). 

When the user has selected one of the menu items of this menu item list, then the ME shall use the Menu Selection 
mechanism to transfer the identifier of the selected menu item to the SIM. 

If help is available for the command and if the user has indicated the need to get help information on one of the menu 
items, the ME shall use the Menu Selection mechanism to inform the SIM about this help request. 

6.4.9 SELECT ITEM 

The SIM shall supply a set of items from which the user may choose one. Each item comprises a short identifier (used 
to indicate the selection), a text string and optionally an icon identifier, contained in an item icon identifier list data 
object located at the end of the list of items. 

Optionally the SIM may include an alpha identifier, and an icon identifier. These are intended to act as a title for the list 
of items. The SIM may include an items next action indicator data object located at the end of the list of items. The 
inclusion of the items next action indicator is to allow the ME to indicate to the user the consequences of performing the 
selection of an item. 

The alpha identifier included by the SIM shall be used by the ME as the title for the list of items. 

If an icon is provided by the SIM, the icon(s) indicated in the command may be used by the ME in addition to, or 
instead of the alpha identifier, as indicated with the icon qualifier (see subclause 6.5.4). Additionally, if "selection using 
soft key preferred" is indicated in the command details and "soft key for SELECT ITEM" is supported by the ME and 
the number of icons items does not exceed the number of soft keys available, then the ME shall display those icons as 
soft keys. 

NOTE: The maximum amount of data sent in one proactive SIM command is 256 bytes. It is therefore 

unavoidable that there is trade-off between the number of items and the length of the descriptive text (the 
alpha identifier of the SELECT ITEM command and the text strings of the items), e.g. for an average 
length of 10 bytes per text string the maximum amount of items is 18. 

The ME shall present the list of text strings to the user, and allow the user to select an item from this list. A flag of the 
command qualifier (see subclause 12.6) indicates whether the list is a choice of navigation options, or a choice of data 
values. The presentation style is left as an implementation decision to the ME manufacturer. However, the ME shall 
present the menu items in the order given by the SIM, unless instructed otherwise by the user, or when this would be 
inappropriate for the presentation style of the ME. 

The SIM may supply with the list, if applicable, indication of the default item, e.g. the previously selected item. 

When the user has selected an item, the ME shall send TERMINAL RESPONSE (OK) to the SIM with the identifier of 
the item chosen. 

If the user has indicated the need to end the proactive SIM session, the ME shall send a TERMINAL 
RESPONSE with "Proactive SIM session terminated by the user" result value. 

If the user has indicated the need to go backwards in the proactive SIM session, the ME shall send a 
TERMINAL RESPONSE with "Backward move in the proactive SIM session requested by the user" result 
value. 

If the ME decides that no user response has been received, the ME shall send a TERMINAL RESPONSE with 
"No response from user" result value. 

If help information is available for the command and if the user has indicated the need to get help information, 
the ME shall send a TERMINAL RESPONSE with "help information required by the user" result value to the 
SIM with the identifier of the item for which the user is requiring help information. 

6.4.10 SEND SHORT MESSAGE 

Two types are defined: 

a short message to be sent to the network in an SMS-SUBMIT message, or an SMS-COMMAND message, 
where the user data can be passed transparently; 
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a short message to be sent to the network in an SMS-SUBMIT message where the text needs to be packed by the 
ME. 

Where the text has been packed, the text string provided by the SIM shall not be longer than 160 characters. It shall use 
the SMS default 7-bit coded alphabet, packed into 8-bit octets, in accordance with TS 23.038 [5]. The data coding 
indication contained in the Data Coding Scheme byte shall be "default alphabet". The text length (which is part of the 
SMS TPDU) given by the SIM shall state the number of 7-bit characters in the text string. The command details shall 
indicate "packing not required". 

8-bit data Short Messages may be sent by the SIM. The command shall indicate packing not required. The data coding 
indication contained in the Data Coding Scheme byte shall be "8 bit". The string shall not be longer than 140 bytes, and 
the length (in SMS TPDU) shall state the number of bytes in the string. 

If UCS2 is supported by the ME, 16-bit data Short Messages may be sent by the SIM. The text string provided by the 
SIM shall not be longer than 70 characters. It shall use the 16-bit UCS2 alphabet format, in accordance with TS 23.038 
[5]. The text length (which is part of the SMS TPDU) given by the SIM shall state the number of 16-bit characters in 
the text string. The command details shall indicate "packing not required". 

SMS commands may be sent by the SIM. These shall count as packed text message. The SMS TPDU from the SIM 
shall indicate SMS-COMMAND. The command details shall indicate "packing not required". 

Where packing by the ME is required, the text string provided by the SIM shall not be longer than 160 characters. It 
shall use the SMS default 7-bit coded alphabet as defined in TS 23.038 [5] with bit 8 set to 0. The text length given by 
the SIM shall state the number of characters in the text string. The ME shall pack the text string and modify the Data 
Coding Scheme byte to "default alphabet" in accordance with TS 23.038 [5] before submitting the message to the 
network. 

Optionally, the SIM may include in this command an alpha identifier. The use of this alpha identifier by the ME is 
described below. 

If the alpha identifier is provided by the SIM and is not a null data object, the ME shall use it to inform the user. 
This is also an indication that the ME should not give any other information to the user on the fact that the ME is 
sending a short message. If an icon is provided by the SIM, the icon indicated in the command may be used by 
the ME to inform the user, in addition to, or instead of the alpha identifier, as indicated with the icon qualifier 
(see subclause 6.5.4). 

If the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), this is 
an indication that the ME should not give any information to the user on the fact that the ME is sending a short 
message. 

If the alpha identifier is not provided by the SIM, the ME may give information to the user concerning what is 
happening. 

If the ME is capable of SMS-MO, then it shall send the data as a Short Message TPDU to the destination address. The 
ME shall give the result to the SIM using TERMINAL RESPONSE (indicating successful or unsuccessful transmission 
of the Short Message) after receiving an SMS RP-ACK or RP-Error from the network. If an alpha identifier was 
provided by the SIM, the ME should not give any information to the user at the reception of SMS RP-ACK or RP-Error. 

If the Short Message TPDU is unsuccessfully received by the network (e.g. the reception of a CP -ERROR), the ME 
shall inform the SIM using TERMINAL RESPONSE (network currently unable to process command). If a null alpha 
identifier was provided by the SIM, the ME should not give any information to the user at the unsuccessful network 
reception. 

The destination address and the SMSC address included in the SEND SHORT MESSAGE proactive command shall not 
be checked against those of the FDN list, even if the Fixed Dialling Number service is enabled. 

6.4.11 SENDSS 

Upon receiving this command, the ME shall decide if it is able to execute the command. Examples are given below, but 
the list is not exhaustive: 

if the command is rejected because the ME is busy on an SS transaction, the ME informs the SIM using 
TERMINAL RESPONSE (ME unable to process command - currently busy on SS transaction); 
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if the command is rejected because the ME is busy on a USSD transaction, the ME shall inform the SIM using 
TERMINAL RESPONSE (ME unable to process command - currently busy on USSD transaction); 

if the command is rejected because the ME does not support that Supplementary Service, the ME informs the 
SIM using TERMINAL RESPONSE (Command beyond ME's capabiUties). 

If the ME is able to send the SS request, the ME shall: 

send the SS request immediately, without need to alert the user first; 

optionally, the SIM may include in this command an alpha-identifier. The use of this alpha-identifier by the ME 
is described below: 

if the alpha identifier is provided by the SIM and is not a null data object, the ME shall use it to inform the 
user. This is also an indication that the ME should not give any other information to the user on the fact that 
the ME is sending a SS request. If an icon is provided by the SIM, the icon indicated in the command may be 
used by the ME to inform the user, in addition to, or instead of the alpha identifier, as indicated with the icon 
qualifier (see subclause 6.5.4); 

if the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), 
this is an indication that the ME should not give any information to the user on the fact that the ME is 
sending an SS request; 

if the alpha identifier is not provided by the SIM, the ME may give information to the user concerning what 
is happening. 

once an SS Return Result message not containing an error has been received from the network, the ME shall 
inform the SIM that the command has been successfully executed, using TERMINAL RESPONSE. This 
command shall include the contents of SS Return Result as additional data. 

If a null alpha identifier was provided by the SIM, the ME should not give any information to the user at the 
reception of an SS Return Result message; 

if the command is rejected because the network cannot support or is not allowing the Supplementary Service 
request, the ME informs the SIM using TERMINAL RESPONSE (SS Return Result error code). 
If a null alpha identifier was provided by the SIM, the ME should not give any information to the user at the 
reception of a SS Return Result message; 

if the SS request is unsuccessfully received by the network, the ME shall inform the SIM using TERMINAL 
RESPONSE (network currently unable to process command), and not retry to send the request. 
If a null alpha identifier was provided by the SIM, the ME should not give any information to the user at the 
reception of a SS Return Result message. 

If the ME supports the Last Number Dialled service, the ME shall not store in EFlnd the supplementary service control 
string sent by the SIM in this command. 

The supplementary service control string included in the SEND SS proactive command shall not be checked against 
those of the FDN list, even if the Fixed Dialling Number service is enabled. 

6.4.12 SEND USSD 

Upon receiving this command, the ME shall decide if it is able to execute the command. Examples are given below, but 
the list is not exhaustive: 

If the command is rejected because the ME is busy on a USSD transaction, the ME informs the SIM using 
TERMINAL RESPONSE (ME unable to process command - currently busy on USSD transaction); 

- If the command is rejected because the ME is busy on a SS transaction, the ME informs the SIM using 
TERMINAL RESPONSE (ME unable to process command - currently busy on SS transaction). 

If the ME is able to send the USSD request, the ME shall: 

send the USSD immediately, without need to alert the user first; 

optionally, the SIM may include in this command an alpha-identifier. The use of this alpha-identifier by the ME 
is described below: 
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If the alpha identifier is provided by the SIM and is not a null data object, the ME shall use it to inform the 
user. This is also an indication that the ME should not give any other information to the user on the fact that 
the ME is sending a USSD request. If an icon is provided by the SIM, the icon indicated in the command 
may be used by the ME to inform the user, in addition to, or instead of the alpha identifier, as indicated with 
the icon qualifier (see subclause 6.5.4). 

If the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), 
this is an indication that the ME should not give any information to the user on the fact that the ME is 
sending a USSD request. 

If the alpha identifier is not provided by the SIM, the ME may give information to the user concerning what 
is happening. 

once the USSD transaction is initiated, a dialogue between the network and the user may occur which involves 
the MMI of the ME. If an alpha identifier was initially provided by the SIM, this alpha identifier may be 
discarded during this dialogue; 

once a RELEASE COMPLETE message containing the USSD Return Result message not containing an error 
has been received from the network, the ME shall inform the SIM that the command has been successfully 
executed, using TERMINAL RESPONSE. This command shall include the text contained in the USSD Return 
Result in a Text String data object. If a null alpha identifier was provided by the SIM, the ME should not give 
any information to the user at the reception of a USSD Return Result message; 

if the MS clears the transaction by sending a RELEASE COMPLETE upon request of the user, the ME shall 
inform the SIM using TERMINAL RESPONSE (USSD transaction terminated by user); 

if the USSD operation is rejected because the network cannot support or is not allowing mobile initiated USSD, 
the ME informs the SIM using TERMINAL RESPONSE (USSD Return Result error code). If a null alpha 
identifier was provided by the SIM, the ME should not give any information to the user at the reception of a 
USSD Return Result message; 

if the USSD request is unsuccessfully received by the network, the ME shall inform the SIM using TERMINAL 
RESPONSE (network currently unable to process command), and not retry to send the request. If a null alpha 
identifier was provided by the SIM, the ME should not give any information to the user at the reception of a 
USSD Return Result message. 

6.4.13 SET UP CALL 

Three types are defined: 

set up a call, but only if not currently busy on another call; 
set up a call, putting all other calls (if any) on hold; 
set up a call, disconnecting all other calls (if any) first. 

For each of these types, the SIM may request the use of an automatic redial mechanism according to TS 02.07 [19]. The 
SIM may also request an optional maximum duration for the redial mechanism. The ME shall attempt at least one call 
set-up. 

In addition to the called party number, the command may contain capability configuration parameters (giving the bearer 
capability to request for the call) and the called party subaddress. The ME shall use these in its call set-up request to the 
network, if supported by the ME. The command may also include DTMF digits, which the ME shall send to the 
network after the call has connected. The ME shall not locally generate audible DTMF tones and play them to the user. 

NOTE: On the downlink audio, DTMF tones reflected by the network may be heard. 

It is possible for the SIM to request the ME to set up an emergency call by supplying the number "112" as called party 
number. If the SIM supplies a number stored in EFecc, this shall not result in an emergency call. 

If the Fixed Dialling Number service is enabled, the number included in the SET UP CALL proactive command shall 
not be checked against those of the FDN list. 

Upon receiving this command, the ME shall decide if it is able to execute the command. Examples are given below, but 
the list is not exhaustive: 
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If the command is rejected because the ME is busy on another call, the ME informs the SIM using TERMINAL 
RESPONSE (ME unable to process command - currently busy on call); 

If the command is rejected because the ME is busy on a SS transaction, the ME informs the SIM using 
TERMINAL RESPONSE (ME unable to process command - currently busy on SS transaction); 

If the command is rejected because the ME cannot support Call Hold, because the ME does not support Called 
Party Subaddress or because the ME does not support the capability configuration parameters requested by the 
SIM, the ME informs the SIM using TERMINAL RESPONSE (Command beyond ME's capabilities); 

If the command is rejected because the network cannot support or is not allowing Call Hold of a multi party call, 
the ME informs the SIM using TERMINAL RESPONSE (SS Return Result error code). 

If the command is rejected because the network cannot support or is not allowing Call Hold of a single call, the 
ME informs the SIM using TERMINAL RESPONSE (Network currently unable to process command). 

If the ME is able to set up the call on the serving network, the ME shall: 

Alert the user (as for an incoming call). This is the confirmation phase. 

Optionally, the SIM may include in this command an alpha-identifier. The use of this alpha-identifier by the ME 
is described below : 

If Second Alpha Identifier in SET UP CALL is supported by ME: 

If the first alpha identifier is provided by the SIM and is not a null data object, the ME shall use it during 
the user confirmation phase. This is also an indication that the ME should not give any other information 
to the user during the user confirmation phase. If an icon is provided by the SIM, the icon indicated in the 
command may be used by the ME to inform the user, in addition to, or instead of the alpha identifier, as 
indicated with the icon qualifier (see subclause 6.5.4). 

If the first alpha identifier is not provided by the SIM or is a null data object (i.e. length = '00' and no 
value part), the ME may give information to the user. 

If the second alpha identifier (i.e the one after the mandatory address object) is provided by the SIM and 
is not a null data object, the ME shall use it during the call set-up phase and during the call. If an icon is 
provided by the SIM, the icon indicated in the command may be used by the ME to inform the user, in 
addition to, or instead of the alpha identifier, as indicated with the icon qualifier (see subclause 6.5.4). 

If the second alpha identifier is not provided by the SIM or is a null data object (i.e. length = '00' and no 
value part), the ME may give information to the user. 

If Second Alpha Identifier in SET UP CALL is not supported by ME: 

If the alpha identifier is provided by the SIM, the ME shall use it to inform the user, at the latest when the 
user is alerted. The ME may also use it to inform the user during the call set-up. If an icon is provided by the 
SIM, the icon indicated in the command may be used by the ME to inform the user, in addition to, or instead 
of the alpha identifier, as indicated with the icon qualifier (see subclause 6.5.4). 

If the user accepts the call, the ME shall then set up a call to the destination address given in the response data, 
with the relevant capability configuration parameters and called party subaddress (if provided by the SIM); 

If the user does not accept the call, or rejects the call, then the ME informs the SIM using TERMINAL 
RESPONSE (user did not accept the proactive command). The operation is aborted; 

If the user has indicated the need to end the proactive SIM session, the ME shall send a TERMINAL 
RESPONSE with "Proactive SIM session terminated by the user" result value. 

Optionally, during call set-up, the ME can give some audible or display indication concerning what is 
happening; 

Once a CONNECT message has been received from the network (defined in TS 04.08), the ME shall inform the 
SIM that the command has been successfully executed, using TERMINAL RESPONSE. Operation of the call 
then proceeds as normal. 
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If the first call set-up attempt is unsuccessfiil: 

- If the SIM did not request redial then the ME shall inform the SIM using TERMINAL RESPONSE (network 
currently unable to process command), and not redial to set-up the call; 

If the SIM requested redial, then the ME may automatically redial the call (depending on its 
capability/configuration). In this case, the ME shall not send a command result to the SIM concerning the first or 
any subsequent failed set-up attempts. If the call set-up has not been successful, and the ME is not going to 
perform any more redials, or the time elapsed since the first call set-up attempt has exceeded the duration 
requested by the SIM, then the ME shall inform the SIM using TERMINAL RESPONSE (network currently 
unable to process command), and the redial mechanism shall be terminated; 

If the user stops the call set-up attempt or the redial mechanism before a result is received from the network, the 
ME informs the SIM using TERMINAL RESPONSE (user cleared down call before connection or network 
release). 

If the ME supports the Last Number Dialled service, the ME shall not store in EFlnd the call set-up details (called party 
number and associated parameters) sent by the SIM in this command. 

6.4.14 POLLING OFF 

This command disables the Proactive Polling (defined in TS ILl 1 [20]). SIM Presence Detection (defined in TS ILl 1 
[20]) is not affected by this command. 

6.4.15 PROVIDE LOCAL INFORMATION 

This command requests the ME to send current local information to the SIM. At present, this information is restricted 
to: 

location information: the mobile country code (MCC), mobile network code (MNC), location area code (LAC) 
and cell ID of the current serving cell; 

- thelMEIoftheME; 

the Network Measurement Results and the BCCH channel list; 
the current date, time and time zone; 
the current ME language setting; 
and the Timing Advance. 

The ME shall return the requested local information within a TERMINAL RESPONSE. Where location information or 
Network Measurement Results has been requested and no service is currently available, then the ME shall return 
TERMINAL RESPONSE (ME currently unable to process command - no service). Where location information or 
Network Measurement Results has been requested and the ME is on limited service (e.g. emergency calls only), the ME 
shall return the data requested in the TERMINAL RESPONSE with the general result (Limited Service). 

If the NMR are requested and a call is in progress, the value of all the returned parameters provided by the ME in the 
response to the command will be valid. The NMR returned when a call is in progress from MEs supporting multiband 
operation, shall be according to the value of the multiband reporting parameter as defined in TS 04.08 [8]. If a call is not 
in progress (i.e. ME is in idle mode) some of the returned parameters (e.g. RXQUAL) may be invalid. In idle mode, 
MEs supporting multiband operation shall ignore the value of the multiband reporting parameter and the NMR returned 
shall be as defined in TS 04.08 [8] when the multiband reporting parameter equals zero. 

NOTE 1 : When in idle mode, the only information element on which it is possible to rely on is the RXLEV -FULL- 
SERVING-CELL, which contains the value of the received signal strength on the BCCH of the current 
serving cell. 

NOTE 2: Network Measurement Results are defined in TS 04.08 [8] as Measurement Results. 

The ME shall return the current date and time as set by the user. If available, the ME shall also return the time zone 
known from the network with the NITZ feature (see TS 22.042 [26]). If the time zone information is not available, the 
ME shall return 'FF' for this element. 

If language setting is requested, the ME shall return the currently used language. 
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If the Timing Advance is requested, the ME shall return the timing advance value that was received from the BTS 
during the last active dedicated connection (e.g. for call or SMS). Timing advance is defined in TS 04.08 [8]. An ME 
supporting the Timing Advance feature shall be able to store the last value of timing advance. In addition to the timing 
advance value, the ME shall return its current status (i.e. ME is in idle mode or not) in order for the application to be 
aware of potential misinterpretation of the timing advance value. Caution should be taken if using the Timing Advance 
value for distance measurement as reflections from the external environment (buildings etc.) may affect the accuracy. 

6.4.16 SET UP EVENT LIST 

The SIM shall use this command to supply a set of events. This set of events shall become the current list of events for 
which the ME is to monitor. 

Any subsequent SET UP EVENT LIST command replaces the current list of events supplied in the previous SET UP 
EVENT LIST command. The SET UP EVENT LIST command can also be used to remove the entire list of events 
current in the ME; see subclause 6.6.16. The list of events provided by the SIM in the last SET UP EVENT LIST 
command shall be removed if the ME is powered off or the SIM is removed or electrically reset. 

When the ME has successfully accepted or removed the list of events, it shall send TERMINAL RESPONSE (OK) to 
the SIM. 

When the ME is not able to successfully accept or remove the list of events, it shall send TERMINAL RESPONSE 
(Command beyond ME's capabilities). 

When one of the events in the current list occurs, then the ME shall use the Event Download mechanism to transfer 
details of the event to the SIM; see clause 1 1 . 

6.4.1 7 PERFORM CARD APDU 

This subclause applies only if class "a" is supported. 

This command requests the ME to send an APDU command to the additional card (Card x). 

The command includes: 

the additional card reader identifier, which is part of the Device Identities object, 
the APDU command to be performed. 

Upon receiving this command, the ME shall decide if it is able to execute the command: 

If the command is rejected because the card reader identity is not valid, the ME informs the SIM using 
TERMINAL RESPONSE (MultipleCard command error - Card reader not valid); 

If the command is rejected because the card reader is not present or has been removed, the ME informs the SIM 
using TERMINAL RESPONSE (MultipleCard command error - Card reader removed or not present); 

If the command is rejected because the card is not present or has been removed, the ME informs the SIM using 
TERMINAL RESPONSE (MultipleCard command error - Card removed or not present); 

If the command is rejected because the card reader is busy, the ME informs the SIM using TERMINAL 
RESPONSE (MultipleCard command error - Card reader busy); 

If the command is rejected because the card is not powered on, the ME informs the SIM using TERMINAL 
RESPONSE (MultipleCard command error - Card powered off); 

If the command is rejected because the received C-APDU format is not valid, the ME informs the SIM using 
TERMINAL RESPONSE (MultipleCard command error - C-APDU format error). 

If the ME is able to transfer the C-APDU to the addressed card, the ME shall: 

Transfer the C-APDU to the addressed card, through the selected ME- Card x protocol; 

Extract the R-APDU data from the addressed card if so requested by the SIM; 

If the command fails because no response is received from Card x, the ME informs the SIM using TERMINAL 
RESPONSE (MultipleCard command error - Card mute); 
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If the command fails because of any form of transmission error, the ME informs the SIM using TERMINAL 
RESPONSE (MultipleCard command error - Transmission error); 

If the command fails because the ME does not support the protocol used by Card x, the ME informs the SIM 
using TERMINAL RESPONSE (MultipleCard command error - Protocol not supported). 

If the command is performed successfully from a protocol point of view, the ME shall include the R-APDU within the 
TERMINAL RESPONSE command. 

6.4.18 POWER OFF CARD 

This subclause applies only if class "a" is supported. 

This command requests the ME to close a session with the additional card (Card x). 

The command includes the additional card reader identifier, which is part of the Device Identities object. 

Upon receiving this command, the ME shall decide if it is able to execute the command: 

If the command is rejected because the card reader identity is not valid, the ME informs the SIM using 
TERMINAL RESPONSE (MultipleCard command error - Card reader not valid); 

If the command is rejected because the card reader is not present or has been removed, the ME informs the SIM 
using TERMINAL RESPONSE (MultipleCard command error - Card reader removed or not present); 

If the command is rejected because the card is not present or has been removed, the ME informs the SIM using 
TERMINAL RESPONSE (MultipleCard command error - Card removed or not present); 

If the command is rejected because the card reader is busy, the ME informs the SIM using TERMINAL 
RESPONSE (MultipleCard command error - Card reader busy). 

If the ME is able to execute the command, the addressed Card x shall be deactivated according to ISO/IEC 7816-3 [16]. 

6.4.19 POWER ON CARD 

This subclause applies only if class "a" is supported. 

This command requests the ME to start a session with the additional card (Card x). 

The command includes the additional card reader identifier, which is part of the Device Identities object. 

Upon receiving this command, the ME shall decide if it is able to execute the command: 

If the command is rejected because the card reader identity is not valid, the ME informs the SIM using 
TERMINAL RESPONSE (MultipleCard command error - Card reader not valid); 

If the command is rejected because the card reader is not present or has been removed, the ME informs the SIM 
using TERMINAL RESPONSE (MultipleCard command error - Card reader removed or not present); 

If the command is rejected because the card is not present or has been removed, the ME informs the SIM using 
TERMINAL RESPONSE (MultipleCard command error - Card removed or not present); 

If the command is rejected because the card reader is busy, the ME informs the SIM using TERMINAL 
RESPONSE (MultipleCard command error - Card reader busy). 

If the ME is able to execute the command, and the addressed Card x is powered off, the ME shall activate the addressed 
Card X according to ISO/IEC 7816-3 [16]. If the addressed Card x is already powered on, the ME shall treat the 
POWER ON CARD command as a warm reset, as defined in ISO/IEC 7816-3 [16]. 

The ME shall return the Answer To Reset within the TERMINAL RESPONSE command. If no ATR is received, the 
ME shall inform the SIM using TERMINAL RESPONSE (MultipleCard command error - Card mute). 

Application writers are advised that the Card x should not be powered up for longer than necessary due to battery life 
considerations. 
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6.4.20 GET READER STATUS 

This subclause applies only if class"a" is supported. 

This command requests the ME to get information about all interfaces or the indicated interface of additional card 
reader(s). This information is restricted to : 

card reader status; 
card reader identifier. 

The ME shall return the requested information from the interfaces to additional card reader(s) within a TERMINAL 
RESPONSE command. 

6.4.21 TIMER MANAGEMENT 

This command requests the ME to manage timers running physically in the ME. The possible actions on timers are 
defined below : 

start a timer; 

deactivate a timer; 

get the current value of a timer. 

The SIM and the ME are able to manage 8 different timers running in parallel. The possible duration of a timer is 
between 1 second and 24 hours. The resolution of a timer is 1 second. The precision of the returned value can not be 
relied upon in all cases due to potential ME activities. When the ME is switched off or the SIM is reset, all timers are 
deactivated in the ME. 

For a given timer, 

when the SIM requests the ME to start the timer with a duration, then : 

the ME shall start the timer with the duration given by the SIM, even if this timer is already running. When a 
timer is started, it takes the value given by the SIM, and is then decremented. The ME shall inform the SIM 
that the command has been successfully executed, using TERMINAL RESPONSE (OK). 

when the SIM requests the ME to deactivate the timer, then : 

if the timer is running, the ME shall deactivate the timer. This prevents the SIM from receiving unnecessary 
information at the expiration of a timer. The ME shall pass the current value of the timer (i.e. the duration 
that remains before the timer elapses) to the SIM, using TERMINAL RESPONSE. 

- if the timer is already deactivated, the ME shall inform the SIM using TERMINAL RESPONSE ('action in 
contradiction with the current timer state'). 

when the SIM requests the ME to get the current value of the timer, then : 

if the timer is running, the ME shall pass the current value of the timer (i.e. the duration that remains before 
the timer elapses) to the SIM, using TERMINAL RESPONSE. 

- if the timer is deactivated, the ME shall inform the SIM using TERMINAL RESPONSE ('action in 
contradiction with the current timer state'). 

When a timer expires (i.e. reaches zero), the ME shall use the Timer Expiration mechanism to transfer the identifier of 
the timer that has expired and the difference between the time when this transfer occurs and the time when the timer 
was initially started. The ME shall then deactivate the timer. 

6.4.22 SET UP IDLE MODE TEXT 

The SIM shall supply a text string, which shall be displayed by the ME as an idle mode text if the ME is able to do it. 
The presentation style is left as an implementation decision to the ME manufacturer. The idle mode text shall be 
displayed in a manner that ensures that neither the network name nor the service providers name are affected. 

If idle mode text is competing with other information to be displayed on the same area, for instance a CB message, the 
idle mode text shall be replaced by the other information. It is up to the ME to restore the idle mode text when the other 
information has no longer to be displayed. 

The text shall be removed from the ME's memory and display if either: 
- the ME is powered off or; 
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- the SIM is removed or electrically reset or; 

- a REFRESH command occurs with "initialisation" or "reset". 

Any subsequent SET UP IDLE MODE TEXT command replaces the current idle mode text of the previous SET UP 
IDLE MODE TEXT. The SET UP IDLE MODE TEXT command can also be used to remove an idle mode text from 
the ME; see subclause 6.6.22. 

When the ME has successfully integrated or removed an idle mode text, it shall send TERMINAL RESPONSE (OK) to 
the SIM. 

When the ME is not able to successfully integrate or remove the idle mode text, it shall send TERMINAL RESPONSE 
"Command beyond ME's capabilities" to the SIM. 

6.4.23 RUN AT COMMAND 

This subclause applies only if class "b" is supported by the ME and enabled by the subscriber through the ME. 

The SIM uses this command to send an AT Command to the ME as though initiated by an attached TE. The ME shall 
then return an AT Response within a TERMINAL RESPONSE to the SIM. 

If this feature is enabled, the SIM uses this command to send an AT Command to the ME as though initiated by an 
attached TE. The ME shall then return an AT Response within a TERMINAL RESPONSE to the SIM. 

If this feature is disabled or the mobile does not support the RUN AT COMMAND, then if the SIM Apphcation Toolkit 
receives an instruction from the network to issue the command, the SIM Application Toolkit should return an error 
indication in accordance with the AT Response set (e.g. as indicated in GSM 27.007 [27]) to the network. 

Optionally, the SIM may include in this command an alpha identifier. The use of this alpha identifier by the ME is 
described below: 

if the alpha identifer is provided by the SIM and is not a null data object, the ME shall use it to inform the 
user. This is also an indication that the ME should not give any other information to the user on the fact that 
the ME is performing an AT command. If an icon is provided by the SIM, the icon indicated in the command 
may be used by the ME to inform the user, in addition to, or instead of the alpha identifier, as indicated with 
the icon qualifier (see subclause 6.5.4); 

if the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), this 
is an indication that the ME should not give any information to the user on the fact that the ME is performing 
an AT command; 

if the alpha identifier is not provided by the SIM, the ME may give information to the user concerning what is 
happening. 

6.4.24 SEND DTMF 

This command requests the ME to send a DTMF string after a call has been successfully established either by the 
proactive command SET UP CALL or the user. This command is independant of sending DTMF within the call set up 
(as defined in the SET UP CALL command) and therefore, can be used at any time during a call. 

The ME shall not locally generate audible DTMF tones and play them to the user. 

NOTE: On the downlink audio, DTMF tones reflected by the network may be heard. 

It shall be possible for the user to deactivate this command. 

The sending of a DTMF string applies only to the currently active call. 

The TERMINAL RESPONSE indicating that the command has been performed successfully shall be sent after the 
complete DTMF string has been sent to the network by the ME. 

If the command is sent in idle mode, or a call is terminated or put on hold before the complete DTMF string has been 
sent to the network, the ME shall inform the SIM using TERMINAL RESPONSE '20' with the additional information 
"Not in speech call". 
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If the user indicates the need to end the proactive SIM application session whilst the ME is sending the DTMF string, 
the ME shall stop sending the DTMF string and shall send a TERMINAL RESPONSE with "Proactive SIM application 
session terminated by the user" result value. 

Optionally, the SIM may include in this command an alpha identifier. The use of this alpha identifier by the ME is 
described below: 

if the alpha identifer is provided by the SIM and is not a null data object, the ME shall use it to inform the 
user. This is also an indication that the ME should not give any other information to the user on the fact that 
the ME is performing a SEND DTMF command. If an icon is provided by the SIM, the icon indicated in the 
command may be used by the ME to inform the user, in addition to, or instead of the alpha identifier, as 
indicated with the icon qualifier (see subclause 6.5.4); 

if the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), 
this is an indication that the ME should not give any information to the user on the fact that the ME is 
performing a SEND DTMF command. 

If the alpha identifier is not provided by the SIM, the ME may give information to the user concerning what is 
happening. 

6.4.25 LANGUAGE NOTIFICATION 

The SIM shall use this command to notify the ME about the language currently used for any text string within proactive 
commands or envelope command responses. 

The notified language stays valid within the ME until the end of the card session or upon executing another 
LANGUAGE NOTIFICATION command. 

When the Toolkit application is not aware of the current Toolkit application language, no specific language is in use or 
several languages are in use, the SIM may notify non-specific language. This has the effect of cancelling a previous 
specific LANGUAGE NOTIFICATION. 

Two types of language notification are defined: 

specific, where an additional Language object shall be included by the SIM; 
non-specific, where no Language object shall be included by the SIM. 

Regardless of whether the ME recognises the notified language or not, the ME shall send TERMINAL RESPONSE 
(OK) to the SIM. 

The ME may use the language included in LANGUAGE NOTIFICATION as appropriate. For instance, this could be 
done to avoid a mix of languages in screen displays combining ME MMI and SIM Toolkit originating text strings. 

6.4.26 LAUNCH BROWSER 

Upon receiving this command, the ME shall decide if it is able to execute the command. Examples are given below, but 
the list is not exhaustive: 

if the command is rejected because the browser on the ME is busy or not available, the ME informs the SIM 
using TERMINAL RESPONSE (ME unable to process command - browser unavailable ; 

if the command is rejected because the ME is busy on a SS transaction, the ME informs the SIM using 
TERMINAL RESPONSE (ME unable to process command - ME currently unable to process command); 

if the command is rejected because the bearer provided in the command is not available, the ME informs the 
SIM using TERMINAL RESPONSE (ME unable to process command - bearer unavailable). 

If the ME is able to execute the command: 

the ME shall inform the SIM that the command has been successfully taken into account, using TERMINAL 
RESPONSE; 

the SIM shall end the proactive session; 
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the ME shall request content using the URL. 

If the gateway addresses and/or the bearer objects are present in the command and are non null data objects, then the 
browser shall use these data to request content using the URL. If the gateway adresses, bearer objects, Provisioning File 
Reference, Browser Identity or URL are null objects or missing, then the ME shall use the default values, i.e. the 
provisionning data defined in [32] for exemple. 

The way the ME requests content using the URL is out of the scope of the present document. This is specified in 
RFC 1738 [32] Annex K for example. 

NOTE: There is a maximum size for the URL that can be given in argument of this proactive command. 

6.4.27 OPEN CHANNEL 

6.4.27.1 OPEN CHANNEL for CSD 

This subclause applies only if class "e" is supported. 

Upon receiving this command, the ME shall decide if it is able to execute the command. The SIM shall indicate whether 
the ME should establish the link immediately or upon receiving the first transmitted data (on demand). 

The SIM provides to the ME a list of parameters necessary to establish a link. 

The SIM may request the use of an automatic reconnection mechanism according to TS 02.07 [19]. The SIM may also 
request an optional maximum duration for the reconnection mechanism. The ME shall attempt at least one link 
establishment set-up. 

The SIM may also request an optional maximum duration for the ME to automatically release the link if no data is 
exchanged. 

If the Fixed Dialling Number service is enabled, the address included in the OPEN CHANNEL proactive command 
shall not be checked against those of the FDN list. 

Upon receiving this command, the ME shall decide if it is able to execute the command. Examples are given below, but 
the list is not exhaustive: 

If immediate link establishment is requested and the ME is unable to set-up a channel using the exact parameters 
provided by the SIM, the ME sets up the channel using the best parameters it can support and informs the SIM of 
the channel identifier and the modified parameters using TERMINAL RESPONSE (Command performed with 
modification); 

If immediate link establishment is requested and the ME is unable to set-up the link with the network using the 
exact parameters provided by the SIM, the ME informs the SIM using TERMINAL RESPONSE (Network 
currently unable to process command). The operation is aborted; 

If on demand link establishment is requested and the ME is unable to set-up a channel using the exact parameters 
provided by the SIM, the ME sets up the channel using the best parameters it can support and informs the SIM of 
the channel identifier and the modified parameters using TERMINAL RESPONSE (Command performed with 
modification); 

If the command is rejected because the ME has no channel left with the requested bearer capabilities, the ME 
informs the SIM using TERMINAL RESPONSE (Bearer independent protocol error). The operation is aborted; 

- If the user does not accept the channel set-up, the ME informs the SIM using TERMINAL RESPONSE (User 
did not accept the proactive command). The operation is aborted; 

If the user has indicated the need to end the proactive SIM session, the ME informs the SIM using TERMINAL 
RESPONSE(Proactive SIM session terminated by the user). The operation is aborted; 

If the command is rejected because the ME is busy on another call, the ME informs the SIM using TERMINAL 
RESPONSE (ME unable to process command - currently busy on call). The operation is aborted; 
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If the command is rejected because the ME is busy on a SS transaction, the ME informs the SIM using 
TERMINAL RESPONSE (ME unable to process command - currently busy on SS transaction). The operation is 
aborted; 

The ME shall inform the SIM that the command has been successfully executed using TERMINAL RESPONSE: 

If immediate link establishment is requested, the ME allocates buffers , sets up the linkand informs the SIM and 
reports the channel identifier using TERMINAL RESPONSE (Command performed successfully); 

If on demand link establishment is requested, the ME allocates buffers, informs the SIM and reports the channel 
identifier using TERMINAL RESPONSE (Command performed successfully); 

If the ME is able to set up the channel on the serving network, the ME shall: 

Alert the user (as for an incoming call). This is the confirmation phase. 

Optionally, the SIM may include in this command an alpha-identifier. The use of this alpha-identifier by the ME 
is described below : 

If the alpha identifier is provided by the SIM and is not a null data object, the ME shall use it during the 
user confirmation phase. This is also an indication that the ME should not give any other information to 
the user during the user confirmation phase. If an icon is provided by the SIM, the icon indicated in the 
command may be used by the ME to inform the user, in addition to, or instead of the alpha identifier, as 
indicated with the icon qualifier (see subclause 6.5.4). 

If the alpha identifier is not provided by the SIM or is a null data object (i.e. length = '00' and no value 
part), the ME may give information to the user. 

If the user accepts the channel, the ME shall then set up a channel; 

If the user does not accept the channel or rejects the channel, then the ME informs the SIM using TERMINAL 
RESPONSE (user did not accept the proactive command). The operation is aborted; 

If the user has indicated the need to end the proactive SIM session, the ME shall send a TERMINAL 
RESPONSE with (Proactive SIM session terminated by the user) result value. 

Optionally, during call set-up, the ME can give some audible or display indication concerning what is 
happening; 

If the first link set-up attempt is unsuccessful: 

- If the SIM did not request link re-connection then the ME shall inform the SIM using TERMINAL RESPONSE 
(network currently unable to process command), and not retry to set-up the link; 

If the SIM requested link re-connection, then the ME may automatically retry to set-up the link (depending on its 
configuration capabilities). In this case, the ME shall not send a command result to the SIM concerning the first 
or any subsequent failed set-up attempts. If the link set-up has not been successful, and the ME is not going to 
perform any more re-tries, or the time elapsed since the first link set-up attempt has exceeded the duration 
requested by the SIM, then the ME shall inform the SIM using TERMINAL RESPONSE (network currently 
unable to process command), and the re-try mechanism shall be terminated; 

If the user stops the link set-up attempt or the re-try mechanism before a result is received from the network, the 
ME informs the SIM using TERMINAL RESPONSE (user cleared down call before connection or network 
release). 

If the ME supports the Last Number Dialled service, the ME shall not store in EFlnd the channel set-up details (called 
party number and associated parameters) sent by the SIM in this command. 

6.4.27.2 OPEN CHANNEL related to GPRS 

This subclause applies only if class "e" is supported. 

Upon receiving this command, the ME shall decide if it is able to execute the command. The SIM shall indicate whether 
the ME should establish the link immediately or upon receiving the first transmitted data (on demand). 
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The SIM provides to the ME a list of parameters necessary to activate a PDP context. 

The ME shall attempt at least one PDP context activation. 

Upon receiving this command, the ME shall decide if it is able to execute the command. Examples are given below, but 
the list is not exhaustive: 

If immediate PDP context activation is requested and the ME is unable to set-up a channel using the exact 
parameters provided by the SIM, the ME sets up the channel using the best parameters it can support and 
informs the SIM of the channel identifier and the modified parameters using TERMINAL RESPONSE 
(Command performed with modification); 

If immediate PDP context activation is requested and the ME is unable to activate the PDP context with the 
network using the exact parameters provided by the SIM, the ME informs the SIM using TERMINAL 
RESPONSE (Network currently unable to process command). The operation is aborted; 

If on demand link establishment is requested and the ME is unable to set-up a channel using the exact parameters 
provided by the SIM, the ME sets up the channel using the best parameters it can support and informs the SIM of 
the channel identifier and the modified parameters using TERMINAL RESPONSE (Command performed with 
modification); 

If the command is rejected because the ME has no channel left with the requested bearer capabilities, the ME 
informs the SIM using TERMINAL RESPONSE (Bearer independent protocol error). The operation is aborted; 

- If the user does not accept the channel set-up, the ME informs the SIM using TERMINAL RESPONSE (User 
did not accept the proactive command). The operation is aborted; 

If the user has indicated the need to end the proactive SIM session, the ME informs the SIM using TERMINAL 
RESPONSE(Proactive SIM session terminated by the user). The operation is aborted; 

If the command is rejected because the class B ME is busy on a call, the ME informs the SIM using TERMINAL 
RESPONSE (ME unable to process command - currently busy on call). The operation is aborted; 

If the command is rejected because the class B ME is busy on a SS transaction, the ME informs the SIM using 
TERMINAL RESPONSE (ME unable to process command - currently busy on SS transaction). The operation is 
aborted; 

The ME shall inform the SIM that the command has been successfully executed using TERMINAL RESPONSE: 

If immediate PDP context activation is requested, the ME allocates buffers, activates the PDP context and 
informs the SIM and reports the channel identifier using TERMINAL RESPONSE (Command performed 
successfully); 

If on demand PDP context activation is requested, the ME allocates buffers, informs the SIM and reports the 
channel identifier using TERMINAL RESPONSE (Command performed successfully); 

If the ME is able to set up the channel on the serving network, the ME shall then 

enter the confirmation phase described hereafter. 

Optionally, the SIM may include in this command an alpha-identifier. The use of this alpha-identifier by the ME 
is described below : 

If the alpha identifier is provided by the SIM and is not a null data object, the ME shall use it during the 
user confirmation phase. This is also an indication that the ME should not give any other information to 
the user during the user confirmation phase. If an icon is provided by the SIM, the icon indicated in the 
command may be used by the ME to inform the user, in addition to, or instead of the alpha identifier, as 
indicated with the icon qualifier (see subclause 6.5.4). 

If the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), 
this is an indication that the ME should not give any information to the user or ask for user confirmation. 

If the alpha identifier is not provided by the SIM, the ME may give information to the user. 

If the does not reject the request, the ME shall then set up a channel; 
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If the user does not accept the channel or rejects the channel, then the ME informs the SIM using TERMINAL 
RESPONSE (user did not accept the proactive command). The operation is aborted; 

If the user has indicated the need to end the proactive SIM session, the ME shall send a TERMINAL 
RESPONSE with (Proactive SIM session terminated by the user) result value. 

Optionally, during PDP context activation, the ME can give some audible or display indication concerning what 
is happening; 

If the user stops the PDP context activation attempt before a result is received from the network, the ME informs 
the SIM using TERMINAL RESPONSE (user cleared down call before connection or network release). 

6.4.27.3 OPEN CHANNEL related to Default (network) Bearer 

This subclause applies only if class "e" is supported. 

Upon receiving this command, the ME shall decide if it is able to execute the command. The SIM shall indicate whether 
the ME should establish the link immediately or upon receiving the first transmitted data (on demand). 

The ME is responsible for providing the parameters necessary to establish the connection (e.g. APN for GPRS, Address 
forCSD, ...). 

Upon receiving this command, the ME shall decide if it is able to execute the command. Example behaviours are listed 
in clauses for the selected bearer. 

The ME shall inform the SIM that the command has been successfully executed using TERMINAL RESPONSE: 

If immediate connection is requested (link establishment or PDP context activation), the ME allocates buffers, 
sets up the link or activates the PDP context (depending of the kind of connection), and informs the SIM and 
reports the channel identifier using TERMINAL RESPONSE (Command performed successfully); 

If on demand connection is requested (link establishment or PDP context activation), the ME allocates buffers, 
informs the SIM and reports the channel identifier using TERMINAL RESPONSE (Command performed 
successfully); 

If the ME is able to set up the channel on the serving network, the ME shall follow the different actions of the chosen 
bearer (see appropriate sections). 

6.4.28 CLOSE CHANNEL 

This subclause applies only if class "e" is supported. 

This command requests the ME to close the channel corresponding to the Channel identifier. 

Upon receiving this command, the ME shall decide if it is able to execute the command: 

If the command is rejected because the channel identifier is not valid, the ME informs the SIM using 
TERMINAL RESPONSE (Bearer independent protocol error); 

If the command is rejected because the requested channel is in error, the ME informs the SIM using TERMINAL 
RESPONSE (Bearer independent protocol error); 

If the ME is able to process the command: 

the ME shall release the data transfer, discard the remaining data and inform the SIM that the command has 
been successfully executed, using TERMINAL RESPONSE; 

Optionally, during CLOSE CHANNEL, the ME can give some audible or display indication concerning what is 
happening. In this intention, the SIM may include in this command an alpha-identifier. The use of this alpha- 
identifier by the ME is described below: 

If the alpha identifier is provided by the SIM and is not a null data object, the ME shall use it to indicate the 
link closing phase. If an icon is provided by the SIM, the icon indicated in the command may be used by the 
ME to inform the user, in addition to, or instead of the alpha identifier, as indicated with the icon qualifier 

(see subclause 6.5.4); 
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If the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), 
this is an indication that the ME should not give any indication to the user during the link closing phase; 

If the alpha identifier is not provided by the SIM, the ME may give an indication to the user during the link 
closing phase. 

6.4.29 RECEIVE DATA 

This subclause applies only if class "e" is supported. 

This command requests the ME to return data from a dedicated Channel identifier according to the number of bytes 
specified by the SIM. 

Upon receiving this command, the ME shall return the data available in the Rx buffer corresponding to the Channel 
identifier. Examples are given below, but the list is not exhaustive: 

If the ME is unable to process the command: 

If the command is rejected because the requested channel is already closed the ME informs the SIM using 
TERMINAL RESPONSE (Bearer independent protocol error); 

If the user has indicated the need to end the proactive SIM session, the ME informs the SIM using TERMINAL 
RESPONSE (Proactive SIM session terminated by the user). 

If the ME is able to process the command: 

If the requested number of bytes is available in the buffer, the ME shall inform the SIM that the command has 
been successfully executed, using TERMINAL RESPONSE and return the requested data and the number of 
bytes remaining in the channel buffer (or FF if more than the maximum bytes remains). 

If the requested number of bytes is available in the buffer but the whole requested data cannot be included in the 
TERMINAL RESPONSE because of APDU size limits, the ME shall return the maximum number of bytes 
possible according to the length of other TLVs. The ME shall inform the SIM that the command has been 
successfully executed, using TERMINAL RESPONSE and shall indicate the number of bytes remaining in the 
channel buffer (or FF if more than the maximum bytes remains). 

If the requested number of bytes is not yet available in the buffer, the ME shall NOT wait for the requested 
number of bytes to arrive. The ME shall inform the SIM, using TERMINAL RESPONSE (Command performed 
with missing information) and returns the data currently available in the channel buffer. 

In the case of packet/datagram transmission, the ME shall put in the Rx buffer a complete packet SDU and only 
one at one time. For example, if UDP datagrams are received by the ME, the latter shall insert only the SDU of 
each UDP packet received in the Rx buffer. After one SDU has been downloaded by the SIM (using one or 
several RECEIVE DATA commands), the ME shall insert the next SDU of UDP datagram, and so on. 

Optionally, the SIM may include in the command an alpha identifier. The use of this alpha identifier by the ME 
is described below: 

If the alpha identifier is provided by the SIM, the ME shall use it to inform the user. The ME may also use it 
to inform the user during data transfer. If an icon is provided by the SIM, the icon indicated in the command 
may be used by the ME to inform the user, in addition to, or instead of the alpha identifier, as indicated with 
the icon qualifier (see subclause 6.5.4); 

If the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), 
this is an indication that the ME should not inform the user during data transfer; 

If the alpha identifier is not provided by the SIM, the ME may inform the user during data transfer. 



6.4.30 SEND DATA 

This subclause applies only if class "e" is supported. 
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This command requests the ME to send data through a previously set up data channel corresponding to a dedicated 
Channel identifier. The SIM informs the ME if the data is : 

to be sent immediately; 

or to be stored in a Tx buffer. Then it is up to the ME to manage the data sending in order to use the bearer in an 
optimised way. To send the data stored in a Tx buffer, the ME shall be notified by a "send data immediately" and 
it shall consider the data presently and previously concatenated in its Tx buffer as one SDU, and send it in only 
one PDU. The Tx buffer shall then be emptied before returning the TERMINAL RESPONSE to the SIM and 
allowing new SIM sending. 

Upon receiving this command, the ME shall either immediatly send data or store provided data into the Tx buffer 
corresponding to the Channel identifier. Examples are given below, but the list is not exhaustive: 

If the ME is unable to process the command: 

If the command is rejected because the requested channel is already closed the ME informs the SIM using 
TERMINAL RESPONSE (Bearer Independent Protocol error - channel identifier not valid); 

If the command is rejected because the ME could not establish the link (after OPEN CHANNEL (on 
demand)) or the link was dropped, the ME informs the SIM using TERMINAL RESPONSE (Bearer 
Independent Protocol error - channel closed); 

If the command is rejected because the channel is temporarily unavailable the ME informs the SIM using 
TERMINAL RESPONSE (ME currendy unable to process command); 

If the requested number of bytes of empty space is not yet available in the buffer the ME informs the SIM 
using TERMINAL RESPONSE (Bearer Independent Protocol error); 

If the user has indicated the need to end the proactive SIM session, the ME informs the SIM using 
TERMINAL RESPONSE (Proactive SIM session terminated by the user). 

If the ME is able to process the command: 

if the requested number of bytes of empty space is available in the buffer the ME shall inform the SIM that 
the command has been successfully executed, using TERMINAL RESPONSE and return the number of 
bytes of empty space available in the Tx buffer (or FF if more then 255 bytes are available); 

in the case of packet/datagram transmission, the structure of the SDU sent by the SIM to the ME shall be 
fully respected while sending to the ME external interface. The size of the SDU is therefore limited by the 
size of the packet PDU sent over the ME external interface. In order to send one complete SDU, the SAT 
application may fill the Tx buffer with several SEND DATA commands, if necessary . Then the ME shall 
send the complete SDU in one packet PDU; 

Optionally, the SIM may include in the command an alpha identifier. The use of this alpha identifier by the 
ME is described below: 

if the alpha identifier is provided by the SIM, the ME shall use it to inform the user. The ME may also use 
it to inform the user during data transfer. If an icon is provided by the SIM, the icon indicated in the 
command may be used by the ME to inform the user, in addition to, or instead of the alpha identifier, as 
indicated with the icon qualifier (see subclause 6.5.4); 

if the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), 
this is an indication that the ME should not inform the user during data transfer; 

if the alpha identifier is not provided by the SIM, the ME may inform the user during data transfer. 

6.4.31 GET CHANNEL STATUS 

This subclause applies only if class "e" is supported. 

This command requests the ME to return a Channel status data object for each dedicated Channel identifier. The ME 
shall return the requested information concerning the channel(s) within a TERMINAL RESPONSE command. 
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6.5 Common elements in proactive SIIVI commands 

6.5.1 Command number 

The command number is to cater for the future possibihty of muhiple ongoing commands (i.e. when the SIM issues 
further commands before receiving the response to the ongoing command). The implications of such muhiple ongoing 
commands have not been elaborated at this stage of the toolkit specification. 

Each command issued by a proactive SIM during a GSM session shall have its own command number. Command 
numbers may take any hexadecimal value between '01' and 'FE'. The command number is held in the command details 
data object. 

The SIM is responsible for assigning the command number. 

The ME shall keep a record of the status of each command and its command number, until the ME gives the result of 
the command to the SIM, using TERMINAL RESPONSE. After this, the ME may erase all internal records concerning 
this command. The command number is then free for allocation by the SIM to a new command. 

When the MS is powered off and on, the details of any ongoing command shall be reset. The ME shall not be expected 
to know the status of commands issued in a previous GSM session. 

6.5.2 Device identities 

This data object gives the devices which are the source and destination for the instruction. Only certain combinations of 
source and destination devices are allowed for each proactive command. These are given in clause 14 of this document. 

6.5.3 Aipina identifier 

Many of the commands include an alpha identifier data object. This is intended to be a short one or two word identifier 
which shall be displayed on screen by the ME at the same time as the SIM command is performed. If longer text strings 
are required to be displayed on the screen, the SIM shall send a separate DISPLAY command. 

6.5.4 Icon identifiers 

Some commands may provide an icon identifier. Icons are intended to enhance the MMI by providing graphical 
information to the user. The display of icons is optional for the ME. If icons are provided by the SIM, the related alpha 
identifier or text string shall be present and not a null string. 

The SIM indicates to the ME whether the icon replaces an alpha identifier or text string, or whether it accompanies it 

(see subclause 12.32). 

If both an alpha identifier or text string, and an icon are provided with a proactive command, and both are requested to 
be displayed, but the ME is not able to display both together on the screen, then the alpha identifier or text string takes 
precedence over the icon. 

If the SIM provides an icon identifier with a proactive command, then the ME shall inform the SIM if the icon could not 
be displayed by sending the general result "Command performed successfully, but requested icon could not be 
displayed". 

If the ME receives an icon and either an empty, or no, alpha identifier/text string is given by the SIM, than the ME shall 
reject the command with general result "Command data not understood by ME". 

NOTE: Application designers should be aware that icons provided by the application may not be displayed by the 
ME. 

6.6 Structure of proactive SIM commands 

The general structure of proactive SIM commands using TLV objects is described in annex D. 
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6.6.1 



DISPLAY TEXT 



Description 


Section 


M/0 


IVIin 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D+E) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Text string 


12.15 


M 


Y 


C 


Icon identifier 


12.31 





N 


D 


Immediate response 


12.43 





N 


E 



6.6.2 GET INKEY 



Description 


Section 


M/0 


IVIin 


Length 


Proactive SIIVI command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Text string 


12.15 


M 


Y 


C 


Icon identifier 


12.31 





N 


D 



Text string 

Contents: text for the ME to display in conjunction with asking the user to respond. 

6.6.3 GET INPUT 



Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D+E+F) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Text string 


12.15 


M 


Y 


C 


Response length 


12.11 


M 


Y 


D 


Default Text 


12.23 





N 


E 


Icon identifier 


12.31 





N 


F 



Text string 

Contents: text for the ME to display in conjunction with asking the user to respond. 

Response length 

Contents: the minimum and maximum acceptable lengths in characters (see subclause 6.4.3) for the response 

from the user. 

- Default Text 

Contents: text for the ME to display, corresponds to a default text string offered by the SIM. 

6.6.4 MORE TIME 



Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 
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6.6.5 PLAY TONE 



Description 


Section 


M/0 


IVIin 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D+E+F) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Alpha identifier 


12.2 





N 


C 


Tone 


12.16 





N 


D 


Duration 


12.8 





N 


E 


Icon identifier 


12.31 





N 


F 



Tone 

Contents: the standard supervisory tone or proprietary ME tone that the ME shall generate, either on its own or 

on top of the downlink audio path. If no tone is specified, then the ME shall default to "general beep". 

NOTE: Some supervisory tones are optional for mobile equipment (see TS 02.40 [18]). 

Duration 

Contents: the length of time for which the ME shall generate the tone, if the tone is continuous or repeatable. For 
single tones, the value of this data object shall be ignored by the ME. If no duration is specified, the ME shall 
default to a duration determined by the ME manufacturer. 

6.6.6 POLL INTERVAL 



Description 


Section 


M/0 


IVIin 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Duration 


12.8 


M 


Y 


C 



Duration 

Contents: the maximum interval between two STATUS commands related to Proactive Polling. 

6.6.7 SET-UP MENU 



Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D1+D2+...Dn+E+F+G) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Alpha identifier 


12.2 


M 


Y 


C 


Item data object for item 1 


12.9 


M 


Y 


D1 


Item data object for item 2 


12.9 





N 


D2 




12.9 





N 


Dx 


Item data object for last item in list 


12.9 





N 


Dn 


Items Next Action Indicator 


12.24 





N 


E 


Icon identifier 


12.31 





N 


F 


Item Icon identifier list 


12.32 





N 


G 
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The SET-UP MENU command BER-TLV data object shall contain Item SIMPLE-TLV data objects. Each Item data 
object contains an item in the list, for the user to choose. The length of each Item data object may be different. Within a 
list, each Item shall have a unique item identifier. 

If the "Item data object for item 1" is a null data object (i.e. length = '00' and no value part), this is an indication to the 
ME to remove the existing menu from the menu system in the ME. 

If the SIM provides an Items Next Action Indicator data object, the comprehension required flag shall be set to '0'. 

The SIM may provide a title icon identifier data object and/or an item icon identifier list data object. The item icon 
identifier data object contains an icon identifier for each item. 

6.6.8 SELECT ITEM 



Description 


Section 


IM/O 


IVIin 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D1 +D2+...Dn+E+F+G+H) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Alpha identifier 


12.2 





N 


C 


Item data object for item 1 


12.9 


M 


Y 


D1 


Item data object for item 2 


12.9 





N 


D2 




12.9 





N 


Dx 


Item data object for last item in list 


12.9 





N 


Dn 


Items Next Action Indicator 


12.24 





N 


E 


Item Identifier 


12.10 





N 


F 


Icon identifier 


12.31 





N 


G 


Item Icon identifier list 


12.32 





N 


H 



The SELECT ITEM command BER-TLV data object shall contain Item SIMPLE-TLV data objects. Each Item data 
object contains an item in the list, for the user to choose. The length of each Item data object may be different. Within a 
list, each Item shall have a unique item identifier. The SELECT ITEM command BER-TLV data object may contain a 
single Item Identifier data object as an indication of the default item. The Comprehension Required flag in the Item 
Identifier data object shall be set to 0, indicating that it is not mandatory for the ME to support indication of the default 
item. 

If the SIM provides an Items Next Action Indicator data object, the comprehension required flag shall be set to '0'. 

The SIM may provide a title icon identifier data object and/or an item icon identifier list data object. The item icon 
identifier data object contains an icon identifier for each item. 

6.6.9 SEND SHORT MESSAGE 



Description 


Section 


IM/O 


IVIin 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D+E+F) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Alpha identifier 


12.2 





N 


C 


Address 


12.1 





N 


D 


SMS TPDU (SMS-SUBMIT or SMS- 
COMMAND) 


12.13 


M 


Y 


E 


Icon identifier 


12.31 





N 


F 



The address data object holds the RP_Destination_Address of the Service Centre. If no RP_Destination_Address is 
transferred, then the ME shall insert the default Service Centre address. 



£75/ 



3GPP TS 11 .1 4 version 8.1 6.0 Release 1 999 



50 



ETSI TS 101 267 V8.16.0 (2004-03) 



6.6.10 SENDSS 





Description 


Section 


M/0 


Min 


Length 




Proactive SIM command Tag 


13.2 


M 


Y 


1 




Length (A+B+C+D+E) 


- 


M 


Y 


1 or 2 




Command details 


12.6 


M 


Y 


A 




Device identities 


12.7 


M 


Y 


B 




Alpha identifier 


12.2 





N 


C 




SS string 


12.14 


M 


Y 


D 




Icon identifier 


12.31 





N 


E 


6.6.11 


SEND USSD 












Description 


Section 


M/0 


Min 


Length 




Proactive SIM command Tag 


13.2 


M 


Y 


1 




Length (A+B+C+D+E) 


- 


M 


Y 


1 or 2 




Command details 


12.6 


M 


Y 


A 




Device identities 


12.7 


M 


Y 


B 




Alpha identifier 


12.2 





N 


C 




USSD String 


12.17 


M 


Y 


D 




Icon identifier 


12.31 





N 


E 


6.6.12 


SET UP CALL 












Description 


Section 


M/0 


Min 


Length 




Proactive SIM command Tag 


13.2 


M 


Y 


1 




Length (A+B+C+D+E+F+G+H+l+J) 


- 


M 


Y 


1 or 2 




Command details 


12.6 


M 


Y 


A 




Device identities 


12.7 


M 


Y 


B 




Alpha identifier (user confirmation phase) 


12.2 





N 


C 




Address 


12.1 


M 


Y 


D 




Capability configuration parameters 


12.4 





N 


E 




Subaddress 


12.3 





N 


F 




Duration 


12.8 





N 


G 




Icon identifier (user confirmation phase) 


12.31 





N 


H 




Alpha identifier (call set up phase) 


12.2 





N 


1 




Icon identifier (call set up phase) 


12.31 





N 


J 



If the capability configuration parameters are not present, the ME shall assume the call is a speech call. 

If the subaddress is not present, the ME shall not provide a called party subaddress to the network. 

If the duration is not present, the SIM imposes no restrictions on the ME of the maximum duration of redials. 

6.6.13 REFRESH 



Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


File List 


12.18 


M/0 


N 


C 
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For the refresh modes "File Change Notification" and "SIM Initialization and File Change Notification", the SIM shall 
supply a File List data object, indicating which EFs need to be refreshed. For other modes, inclusion of a File List is 
optional, and the ME shall ignore it. 

6.6.14 POLLING OFF 





Description 


Section 


IVI/0 


IVIin 


Length 




Proactive SIM command Tag 


13.2 


M 


Y 


1 




Length (A+B) 


- 


M 


Y 


1 or 2 




Command details 


12.6 


M 


Y 


A 




Device identities 


12.7 


M 


Y 


B 


6.6.15 


PROVIDE LOCAL INFORMATION 










Description 


Section 


M/0 


IVIin 


Length 




Proactive SIM command Tag 


13.2 


M 


Y 


1 




Length (A+B) 


- 


M 


Y 


1 or 2 




Command details 


12.6 


M 


Y 


A 




Device Identities 


12.7 


M 


Y 


B 


6.6.16 


SET UP EVENT LIST 










Description 


Section 


IM/O 


Min 


Length 




Proactive SIM command Tag 


13.2 


M 


Y 


1 




Length (A+B+C) 


- 


M 


Y 


1 or 2 




Command details 


12.6 


M 


Y 


A 




Device Identities 


12.7 


M 


Y 


B 




Event list 


12.25 


M 


Y 


C 



If the Event list is a null data object (i.e. length = '00' and no value part), this is an indication to the ME to remove the 
existing list of events in the ME. 



6.6.17 PERFORM CARD APDU 

This subclause applies only if class "a" is supported. 



Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device Identities 


12.7 


M 


Y 


B 


C-APDU 


12.35 


M 


Y 


C 



6.6.18 POWER OFF CARD 

This subclause applies only if class "a" is supported. 



Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device Identities 


12.7 


M 


Y 


B 
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Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device Identities 


12.7 


M 


Y 


B 



6.6.20 GET READER STATUS 

This subclause applies only if class "a" is supported. 



Description 


Section 


M/0 


Min 


Length 


Proactive SIIVI command Tag 


13.2 


M 


Y 


1 


Length (A+B) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device Identities 


12.7 


M 


Y 


B 



6.6.21 TIMER MANAGEMENT 



Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device Identities 


12.7 


M 


Y 


B 


Timer Identifier 


12.37 


M 


Y 


C 


Timer value 


12.38 


M/0 


N 


D 



Timer Identifier 

Contents: identifier of the timer to which the command applies. 

Timer value 

Contents: length of time during which the timer has to run. The SIM shall supply this data object only when a 
timer has to be started. 

6.6.22 SET UP IDLE MODE TEXT 



Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Text string 


12.15 


M 


Y 


C 


Icon identifier 


12.31 





N 


D 



If the "Text string" is a null data object (i.e. length = '00' and no value part), the ME shall remove the existing idle mode 
text in the ME. 

6.6.23 RUN AT COMMAND 

This subclause applies only if class "b" is supported. 
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Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D+E) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device Identities 


12.7 


M 


Y 


B 


Alpha Identifier 


12.2 





N 


C 


AT Command 


12.40 


M 


Y 


D 


Icon identifier 


12.31 





N 


E 



6.6.24 SEND DTMF COMMAND 



Description 


Section 


M/0 


IVIin 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D+E) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device Identities 


12.7 


M 


Y 


B 


Alpha Identifier 


12.2 





N 


C 


DTMF String 


12.44 


M 


Y 


D 


Icon identifier 


12.31 





N 


E 



6.6.25 LANGUAGE NOTIFICATION 



Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Language 


12.45 


M/0 


Y/N 


C 



- Language 

Contents: Currently used language. The SIM shall include a Language object, when a specific language is being 
notified. 

6.6.26 LAUNCH BROWSER 



Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D+E+F1+ F2+...+FN+G+H+I) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device Identities 


12.7 


M 


Y 


B 


Browser Identity 


12.47 





N 


C 


URL 


12.48 


M 


Y 


D 


Bearer 


12.49 





N 


E 


Provisioning File Reference 1 


12.50 





N 


F1 


Provisioning File Reference 2 


12.50 





N 


F2 




12.50 





N 


Fx 


Provisioning File Reference N 


12.50 





N 


FN 


Text String (Gateway/Proxy Identity) 


12.15 





N 


G 


Alpha identifier (user confirmation phase) 


12.2 





N 


H 


Icon identifier (user confirmation phase) 


12.31 





N 


1 



If the URL data object is provisioned the URL value shall take precedence over any other URL value. 
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If Provisioning File Reference data object is present in the command then it shall take precedence over Bearer and 
Proxy Identity. If several Provisioning File References are present in the same command the information in the first 
reference shall take precedence. 

Gateway/Proxy Identity is a text string (cf. 12.15) which gives to the mobile the name/identity of the Gateway/Proxy to 
be used for connecting to the URL This Gateway/Proxy Identity is required when the bearer data object is present. 

The ME shall ask the user for confirmation using the Alpha Identifier/Icon Identifier (user confirmation phase) if 
present, when it receives a LAUNCH BROWSER command which requests the existing browser session connected to a 
new URL or to terminate a browser session. 

6.6.27 OPEN CHANNEL 



6.6.27.1 



OPEN CHANNEL related to a CS bearer 



Description 


Section 


iW/O 


MIn 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D+E+F+G+H+l+J+K+L+M+N+O) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Alpha identifier 


12.2 





N 


C 


Icon identifier 


12.31 





N 


D 


Address 


12.1 


M 


Y 


E 


Subaddress 


12.3 





N 


F 


Duration 1 


12.8 





N 


G 


Duration 2 


12.8 





N 


H 


Bearer description 


12.52 


M 


Y 


1 


Buffer size 


12.55 


M 


Y 


J 


Other address (local address) 


12.58 





N 


K 


Text String (User login) 


12.15 





N 


L 


Text String (User password) 


12.15 





N 


M 


SIM/ME interface transport level 


12.59 





N 


N 


Data destination address 


12.58 





N 






The Subaddress may be requested. If the subaddress is not present, the ME shall not provide a called party subaddress 
to the network. 

Duration 1 indicates the duration of reconnection tries. If Duration 1 is not present, the SIM imposes no restrictions on 
the ME. Duration 1 shall be present if Duration 2 is present. 

Duration 2 indicates the timeout value before the ME releases the link if there is no data exchanged on the link.If 
duration 2 is not present the link is never released automatically by the ME. 

The local address parameter (see 12.58) provides information to the ME necessary to identify the local device (i.e. it 
provides an IP address). If local address length is null, dynamic local address is required. If parameter is not present, the 
mobile may use the mobile default local address configuration. 

The ME may support a remote access login feature (e.g. PPP login). If supported by the ME, the SIM may provide 
'User login' and 'User password' parameters which allow the ME to answer an access authentication challenge . If only 
one parameter is present, it is considered as the User Login and the ME shall use default Password configuration if any. 
If the parameters are not present, the ME shall use default Login/Password configuration if any. If no authentication 
challenge is requested, the user login and password parameters shall be ignored. 

If the SIM/ME interface transport level is present in the command, then the ME shall provide the requested transport 
layer protocols under the channel and shall use this object containing a set of parameters required to make the transport 
connection. The data that is exchanged at the SIM/ME interface in the RECEIVE DATA/SEND DATA commands are 
SDUs. When the SAT application sends an SDU, the transport layer within the ME is in charge to add the transport 
header to the SDU in order to build the Transport-PDU. When the SAT application requests to receive an SDU, the 
transport layer within the ME is in charge to remove the transport header of the Transport-PDU, and to forward the 
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SDU to the SAT. If the parameter is not present, the SIM/ME interface is the bearer level (serial link or packet link as 
defined in TS 27.007 [27]), and the SAT application is in charge of the network and transport layer. 

The Data destination address is the end point destination address of sent data. This data destination address is requested 
when a SIM/ME interface transport is present, otherwise it is ignored. The data destination address is a data network 
address. 



6.6.27.2 



OPEN CHANNEL related to GPRS 



Description 


Section 


M/0 


lUlin 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D+E+F+G+H+l+J+K+L) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Alpha identifier 


12.2 





N 


C 


Icon identifier 


12.31 





N 


D 


Bearer description 


12.52 


M 


Y 


E 


Buffer size 


12.55 


M 


Y 


F 


Network Access Name 


12.61 





N 


G 


Other address (local address) 


12.58 





N 


H 


Text String (User login) 


12.15 





N 


1 


Text String (User password) 


12.15 





N 


J 


SIM/ME interface transport level 


12.59 





N 


K 


Data destination address 


12.58 





N 


L 



The Network Access Name parameter may be requested. The Network Access Name parameter contains an Access 
Point Name (APN) identifying the Gateway GSN (GGSN) which provides interworking with an external packet data 
network. If the parameter is not present, the mobile may use the default Access Point Name in the mobile configuration 
or the default subscription value. 

The local address parameter (see 12.58) provides information to the ME necessary to identify the local device. If the 
parameter is present and length is not null, it provides an IP address that identifies the SAT application in the address 
area applicable to the PDN. If local address length is null, dynamic local address allocation is required for the SAT 
application. If parameter is not present, the mobile may use the mobile default local address configuration. 

The ME may support a remote access login feature. If supported by the ME, the SIM may provide 'User login' and 'User 
password' parameters, which can be used for authentication. If only one parameter is present, it is considered as the 
User Login and the ME shall use default Password configuration if any. If the parameters are not present, the ME shall 
use default Login/Password configuration if any. If no authentication challenge is requested, the user login and 
password parameters shall be ignored. 

If the SIM/ME interface transport level is present in the command, then the ME shall provide the requested transport 
layer protocols under the channel and shall use this object containing a set of parameters required to make the transport 
connection. The data that is exchanged at the SIM/ME interface in the RECEIVE DATA/SEND DATA commands are 
SDUs. When the SAT application sends an SDU, the transport layer within the ME is in charge to add the transport 
header to the SDU in order to build the Transport-PDU. When the SAT application requests to receive an SDU, the 
transport layer within the ME is in charge to remove the transport header of the Transport-PDU, and to forward the 
SDU to the SAT. If the parameter is not present, the SIM/ME interface is the bearer level (serial link or packet link as 
defined in TS 27.007 [27]) and the SAT application is in charge of the network and transport layer. 

The Data Destination Address is the end point destination address of sent data. This data destination address is 
requested when a SIM/ME interface transport is present, otherwise it is ignored. The data destination address is a data 
network address (e.g. IP address). 
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6.6.27.x OPEN CHANNEL related to Default (network) Bearer 



Description 


Section 


M/0 


Min 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D+E+F+H+l+J+K+L) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Alpha identifier 


12.2 





N 


C 


Icon identifier 


12.31 





N 


D 


Bearer description 


12.52 


M 


Y 


E 


Buffer size 


12.55 


M 


Y 


F 


Other address (local address) 


12.58 





N 


H 


Text String (User login) 


12.15 





N 


1 


Text String (User password) 


12.15 





N 


J 


SIIVI/ME interface transport level 


12.59 





N 


K 


Data destination address 


12.58 





N 


L 



The local address parameter (see 12.58) provides information to the ME necessary to identify the local device. If the 
parameter is present and length is not null, it provides an IP address that identifies the SAT application in the address 
area applicable to the PDN. If local address length is null, dynamic local address allocation is required for the SAT 
application. If parameter is not present, the mobile may use the mobile default local address configuration. 

The ME may support a remote access login feature. If supported by the ME, the SIM may provide 'User login' and 'User 
password' parameters, which can be used for authentication. If only one parameter is present, it is considered as the 
User Login and the ME shall use default Password configuration if any. If the parameters are not present, the ME shall 
use default Login/Password configuration if any. If no authentication challenge is requested, the user login and 
password parameters shall be ignored. 

If the SIM/ME interface transport level is present in the command, then the ME shall provide the requested transport 
layer protocols under the channel and shall use this object containing a set of parameters required to make the transport 
connection. The data that is exchanged at the SIM/ME interface in the RECEIVE DATA/SEND DATA commands are 
SDUs. When the SAT application sends an SDU, the transport layer within the ME is in charge to add the transport 
header to the SDU in order to build the Transport-PDU. When the SAT application requests to receive an SDU, the 
transport layer within the ME is in charge to remove the transport header of the Transport-PDU, and to forward the 
SDU to the SAT. If the parameter is not present, the SIM/ME interface is the bearer level (serial link or packet link as 
defined in TS 27.007 [27]) and the SAT application is in charge of the network and transport layer. 

The Data Destination Address is the end point destination address of sent data. This data destination address is 
requested when a SIM/ME interface transport is present, otherwise it is ignored. The data destination address is a data 
network address (e.g. IP address). 

6.6.28 CLOSE CHANNEL 



Description 


Section 


M/0 


IVIin 


Length 


Proactive SIM command Tag 


13.2 


M 


Y 


1 


Length (A+B+C+D) 


- 


M 


Y 


1 or 2 


Command details 


12.6 


M 


Y 


A 


Device Identities 


12.7 


M 


Y 


B 


Alpha identifier 


12.2 





N 


C 


Icon identifier 


12.31 





N 


D 
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6.6.29 RECEIVE DATA 





Description 


Section 


M/0 


Min 


Length 




Proactive SIM command Tag 


13.2 


M 


Y 


1 




Length (A+B+C+D+E) 


- 


M 


Y 


1 or 2 




Command details 


12.6 


M 


Y 


A 




Device Identities 


12.7 


M 


Y 


B 




Alpha identifier 


12.2 





N 


C 




Icon identifier 


12.31 





N 


D 




Channel data length 


12.54 


M 


Y 


E 


6.6.30 


SEND DATA 












Description 


Section 


M/0 


Min 


Length 




Proactive SIM command Tag 


13.2 


M 


Y 


1 




Length (A+B+C+D+E) 


- 


M 


Y 


1 or 2 




Command details 


12.6 


M 


Y 


A 




Device identities 


12.7 


M 


Y 


B 




Alpha identifier 


12.2 





N 


C 




Icon identifier 


12.31 





N 


D 




Channel data 


12.53 


M 


Y 


E 


6.6.31 


GET CHANNEL STATUS 












Description 


Section 


M/0 


Min 


Length 




Proactive SIM command Tag 


13.2 


M 


Y 


1 




Length (A+B) 


- 


M 


Y 


1 or 2 




Command details 


12.6 


M 


Y 


A 




Device identities 


12.7 


M 


Y 


B 



6.7 



Command results 



Once the ME has made its attempt to execute a proactive command from the SIM, the ME shall inform the SIM of the 
success or otherwise of that command, by using TERMINAL RESPONSE. This message gives the command details, 
including the number of the command (see subclause 6.5.1), a general result, and sometimes more specific information. 

Three overall categories of results are defined: 

Command performed successfully. This is returned by the ME for every successful command; 

Temporary problem with executing command. This is further defined below, but generally these indicate to the 
SIM that it is worth trying again later; 

Permanent problem with executing command. These are further defined below, but generally indicate that the 
same command will end in the same result if repeated during the same GSM session. 

Successful commands are further defined as: 

Command performed successfully. There were no problems; 

Command performed with partial comprehension. Here the ME receives a command with one or more SIMPLE- 
TLV data objects that are unrecognized or unexpected, all of which do not have their "comprehension required" 
flag set (subclause 13.3), but the parent BER-TLV data object still has the minimum set of SIMPLE-TLV data 
objects required to perform the command; 

Command performed, with missing information. The ME received at least the minimum set of component parts, 
but did not receive all of the parts that it believed mandatory for the SIM to send; 
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Command performed, but modified by call control. This is sent by the ME to indicate that call control modified 
the type of request indicated in the proactive command, and that the action requested by call control was 
performed successfully; 

Command performed with modification. This is sent by the ME to indicate that it is unable to process the 
command using the exact parameters provided by the SIM. The command is processed with the best possible 
parameters. 

Temporary problems are further defined as: 

ME is currently unable to process the command. Specific causes for this are: 

the screen is busy; 

ME currently busy on a call; 

ME currently busy on SEND DTMF operation; 

ME currently busy on SS transaction; 

ME currently busy on USSD operation; 

no service is currently available; 

access control class barred on serving network; 

no radio resource currently available; 

not in speech call. 

If none of these can be made to apply, a "no cause can be given" value can be used. 

Network is currently unable to process the command. Specific cause values are the cause values given by the 
network, as defined in TS 04.08 [8]. 

In some proactive commands, the ME is required to solicit and receive approval of the user before executing the 
proactive command. In the case that the user does not give approval for the execution of the proactive command, 
it shall not be executed by the ME and the terminal response "user did not accept the proactive command" shall 
be returned by the ME to the SIM. 

The user cleared down the call, before the call connected (CONNECT received from network, as defined in 
TS 04.08 [8]) or before the network released the call. 

Action in contradiction with the current timer state. This is where the SIM requests an action for a timer to be 
taken by the ME and the state of the timer does not allow that action. 

Interaction with call control by SIM, temporary problem. This is sent by the ME to indicate that call control 
modified the type of request indicated in the proactive command, and that the action requested by call control 
encounters a temporary problem. 

Permanent problems are further defined as: 

Command is beyond ME's capabilities. This is sent by the ME when it understands what the SIM is asking it to 
do, but does not have the capability to do it, e.g. ME which only supports SMS asked to set up a call. 

Command type not understood by ME. This is sent by the ME when the SIM sends a command with the Type of 
Command byte set to a value the ME does not know. This is to allow future expansion of commands. 

Command data not understood by ME. This is sent by the ME when the command type is understood by the ME, 
but the related data object(s) are not, e.g. reserved values have been included in a data object, or one or more 
unknown SIMPLE-TLV data objects have a "comprehension required" tag. 

SS Return Error. This is given to the SIM when the network returns a SS error in response to a previous SS 
command. Specific cause values are the same as given by the network in the Return Error message. 

USSD Return Error. This is given to the SIM when the network returns a USSD error in response to a previous 
USSD command. Specific cause values are the same as given by the network in a Return Error message. 

SMS RP -ERROR. This is given to the SIM when the network returns an error in response to the ME trying to 
send a short message. Specific cause values are the same as the cause value of RP-Cause in an RP-ERROR 
message. 
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Error, required values are missing. This is given when the command type is understood by the ME, but it does 
not receive the minimum set of SIMPLE-TLV data objects that it requires to perform the command. These 
components are shown by the "Min" column in the command structure definitions. 

Interaction with call control by SIM or MO short message control by SIM, permanent problem. This is sent by 
the ME to indicate that : 

call control by SIM does not allow the action corresponding to the proactive command or 

call control by SIM has modified the type of request indicated in the proactive command and that the action 

requested by call control encounters a permanent problem. 

Specific cause values for this are : 

action not allowed; 
the type of request has changed; 
If none of these can be made to apply, a "no cause can be given" value can be used. 

6.8 Structure of TERMINAL RESPONSE 

Direction: ME to SIM 

The command header is specified in TS 1 1.1 1 [20]. Length (A+B+C+D+E+F+G+H+I+J+K+L+M+N+P+Q+ 
R+S+T+U+V) is indicated by P3 of the header. 

Command parameters/data: 
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Description 


Section 


M/0 


IVIln 


Length 


Command details 


12.6 


M 


Y 


A 


Device identities 


12.7 


M 


N 


B 


Result 


12.12 


M 


Y 


C 


Duration (only required in response to a 
POLL INTERVAL proactive command) 


12.8 


M/O 


Y/N 


D 


Text string (only required in response to a 
GET INKEY or GET INPUT or SEND USSD 
proactive command) 


12.15 


M/0 


Y/N 


E 


Item identifier (only required in response to 
SELECT ITEM proactive command) 


12.10 


M/O 


Y/N 


F 


Local information (only required in response 
to PROVIDE LOCAL INFORMATION 
proactive command) 


12.19, 12.20, 

12.22, 12.29, 

12.39, 12.45 

& 12.46 


M/0 


Y/N 


G 


Call control requested action (only required 
if call control by SIM has modified a 
proactive command SET UP CALL, SEND 
SS or SEND USSD in another type of 
request). 


12.30 


M/0 


Y/N 


H 


Result data object 2 (only required if call 
control by SIM has modified a proactive 
command SET UP CALL, SEND SS or 
SEND USSD in another type of request). 


12.12 


M/0 


Y/N 


1 


Card reader status (only required in 
response to GET READER STATUS 
command). According to the requested 
information, one Card reader status object 
for each card interface reported or one Card 
reader identifier object is required, 
(only if class "a" is supported)"" 


12.33, 12.57 


M/0 


N 


Jo + ... + Jn 

or J 


Card ATR (only required in response to 
POWER ON CARD). 

(only if class "a" is supported) 


12.34 


M/0 


N 


K 


R-APDU (only required in response to 
PERFORM CARD APDU). 

(only if class "a" is supported) 


12.36 


M/0 


N 


L 


Timer identifier (only required in response to 
a TIMER MANAGEMENT proactive 
command) 


12.37 


M/0 


Y/N 


M 


Timer value (only required in response to a 
TIMER MANAGEMENT proactive 
command) 


12.38 


M/0 


Y/N 


N 


AT Response (only required in response to 
RUN AT COMMAND proactive command) 
(only if class "b" is supported) 


12.41 


M/0 


Y/N 


P 


Text string2 (only required if call control by 
SIM has modified the proactive command 
SET UP CALL or SEND SS into a USSD 
request) 


12.15 


M/0 


Y/N 





Channel data (only required in response to 
RECEIVE DATA) 

(only if class "e" is supported) 


12.53 


M/0 


Y/N 


R 
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Description 


Section 


M/0 


IVIln 


Length 


Channel status (only required in response to 
GET CHANNEL STATUS or OPEN 
CHANNEL proactive command) 
(only if class "e" is supported) 


12.56 


M/O 


Y/N 


So + . . . + Sn 


Channel data length (only required in 
response to RECEIVE DATA or SEND 
DATA proactive command) 
(only if class "e" is supported) 


12.54 


M/O 


Y/N 


T 


Bearer description (only required in 
response to OPEN CHANNEL proactive 
command) 

(only if class "e" is supported) 


12.52 


M/O 


Y/N 


U 


Buffer size (only required in response to 
OPEN CHANNEL proactive command) 
(only if class "e" is supported) 


12.55 


M/O 


Y/N 


V 



Command details: this data object shall be identical to the command details data object (including the 
comprehension required flag) given by the SIM in the proactive command to which the ME is giving the result. 

If the ME has not received a valid Command number, all Command Details object values shall be set to '00' and 
the Result shall indicate an error. 

If the failure is caused by a problem on the transmission layer, the ME shall respond with "temporary problem" 
("ME currently not able to process command"). If not, the ME shall respond with "permanent problem" (either 
"command not understood by ME" or "Error required values are missing"). 

The SIM shall interpret a Terminal Response with a command number '00' as belonging to the last proactive 
command having been sent to the ME. 

Device identities: the ME shall set the device identities to: 
Source: ME 

Destination: SIM 

Result: This data object holds the result of the proactive SIM command. 

Duration: When the ME issues a successful TERMINAL RESPONSE for a POLL INTERVAL command, it 
shall state the polling interval it will be using in the Duration data object. All other types of TERMINAL 
RESPONSE do not need to include Duration. If one is included by the ME, the SIM shall ignore it. 



£75/ 



3GPP TS 1 1 .1 4 version 8.1 6.0 Release 1 999 62 ETSI TS 1 01 267 V8.1 6.0 (2004-03) 

Text string: When the ME issues a successful TERMINAL RESPONSE ('OX' resuh value - refer to subclause 
12.12) for a GET INKEY or GET INPUT or SEND USSD command, it shall supply the single character or the 
character string entered by the user in the Text string data object, or the text returned within the Return Result 
message from the network for the USSD command, no matter what type of string was entered. All other types of 
TERMINAL RESPONSE do not need to include Text string. If one is included by the ME, the SIM shall ignore 
it. When the ME issues a successful TERMINAL RESPONSE ('OX' result value - refer to subclause 12.12) for a 
GET INKEY ("Yes/No") command with command qualifier set to "Yes/No", it shall supply the value '01' when 
the answer is "positive" and the value '00' when the answer is "negative" in the Text string data object. 

When the ME issues a successful TERMINAL RESPONSE ('OX' result value - refer to subclause 12.12) for a 
GET INPUT command to which the user has made an empty input (i.e. if the user does not enter any character), 
the ME shall indicate this by means of either a null text string (see subclause 12.15 for the coding of this object), 
or by means of a Text string object with Length = '01', and a Value part consisting of a data coding scheme only. 

NOTE: The notion of empty input is different from the general result 'no response from user' (see 
subclause 12.12). The latter event is typically caused by a timeout in the MMI, whereas an 
empty input requires an acknowledgement from the user. 

Item identifier: When the ME issues a successful TERMINAL RESPONSE ('OX' result value - refer to subclause 
12.12) for a SELECT ITEM command, it shall supply the identifier of the item selected by the user in the Item 
identifier data object. If the ME issues a TERMINAL RESPONSE with result "Help information required by the 
user" for a SELECT ITEM command, it shall supply the identifier of the item for which the user is requiring 
help information. All other types of TERMINAL RESPONSE do not need to include Item identifier. If one is 
included by the ME, the SIM shall ignore it. 

- Local information. When the ME issues a successful TERMINAL RESPONSE for a PROVIDE LOCAL 
INFORMATION command, it shall supply the requested local information. 

Where the SIM has requested location information, TERMINAL RESPONSE shall contain the location 
information data object. All other types of TERMINAL RESPONSE do not need to include location 
information. If one is included by the ME, the SIM shall ignore it. 

- Where the SIM has requested the IMEI, TERMINAL RESPONSE shall contain the IMEI data object. All 
other types of TERMINAL RESPONSE do not need to include IMEI information. If one is included by the 
ME, the SIM shall ignore it. 

- Where the SIM has requested the Network Measurement Results the TERMINAL RESPONSE shall contain 
the NMR data object and the BCCH channel list data object. All other types of TERMINAL RESPONSE do 
not need to include the NMR information or the BCCH channel list. If one is included by the ME, the SIM 
shall ignore it. 

- Where the SIM has requested the date, time and time zone the TERMINAL RESPONSE shall contain the 
Date-Time and Time zone data object. All other types of TERMINAL RESPONSE do not need to include the 
Date-Time and Time zone information. If one is included by the ME, the SIM shall ignore it. 

- Where the SIM has requested the currently used language, the TERMINAL RESPONSE shall contain the 
Language data object. All other types of TERMINAL RESPONSE need not to include the Language 
information. If one is included by the ME, the SIM shall ignore it. 

- Where the SIM has requested the Timing Advance, the TERMINAL RESPONSE shall contain the Timing 
Advance data object. All other types of TERMINAL RESPONSE do not need to include the Timing 
Advance information. If one is included by the ME, the SIM shall ignore it. 

Call control requested action. When the ME issues a TERMINAL RESPONSE for a proactive command SET 
UP CALL, SEND SS or SEND USSD which has been modified by call control by SIM in another type of 
request, it shall supply the response data given in response to the ENVELOPE (CALL CONTROL). 

- Result data object 2. When the ME issues a TERMINAL RESPONSE for a proactive command SET UP CALL, 
SEND SS or SEND USSD which has been modified by call control by SIM in another type of request, it shall 
supply the Result data object it would have supplied for the proactive command equivalent to the action 
requested by call control, and given in the Call control request data element. 

Card reader status (if class "a" is supported). When the ME issues a successful TERMINAL RESPONSE for a 
CARD READER STATUS command, it shall supply the requested readers information. 
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- Where the SIM has requested the card reader status, TERMINAL RESPONSE shall supply the status of each 
card reader in n consecutive Card reader status data objects, where n is the card reader count. All other types 
of TERMINAL RESPONSE do not need to include Card reader status. If one is included by the ME, the SIM 
shall ignore it. 

Where the SIM has requested the card reader identifier, TERMINAL RESPONSE shall supply the identifier 
of the requested card reader identifier All other types of TERMINAL RESPONSE do not need to include 
Card reader identifier. If one is included by the ME, the SIM shall ignore it. 

""- Card ATR (if class "a" is supported): When the ME issues a successful TERMINAL RESPONSE for a POWER 
ON CARD command, it shall supply the ATR returned by the addressed card in the Card ATR data object. All 
other types of TERMINAL RESPONSE do not need to include Card ATR. If one is included by the ME, the 
SIM shall ignore it. 

- R-APDU (if class "a" is supported): When the ME issues a successful TERMINAL RESPONSE for a 
PERFORM CARD APDU command, it shall supply the response data and status words in the R-APDU data 
object. All other types of TERMINAL RESPONSE do not need to include R-APDU. If one is included by the 
ME, the SIM shall ignore it. 

- Timer identifier: When the ME issues a successful TERMINAL RESPONSE for a TIMER MANAGEMENT, it 
shall state in the timer identifier data object the identifier of the timer to which this command applies. All other 
types of TERMINAL RESPONSE do not need to include timer identifier data object. If one is included by the 
ME, the SIM shall ignore it. 

- Timer value: When the ME issues a successful TERMINAL RESPONSE for a TIMER MANAGEMENT 
command with command qualifier indicating 'deactivate' or 'get the current value of the timer', it shall state in the 
timer value data object the current value of the timer. All other types of TERMINAL RESPONSE do not need to 
include timer value. If one is included by the ME, the SIM shall ignore it. 

- AT Response (if class "b" is supported): When the ME issues a successful TERMINAL RESPONSE for a RUN 
AT COMMAND command, it shall supply the following information. 

- The TERMINAL RESPONSE shall contain the AT Response (as defined in section 12.40). If the AT 
Response is included in a TERMINAL RESPONSE to a different command, it shall be ignored by the SIM. 

Text string2: When the ME issues a successful TERMINAL RESPONSE for a proactive command SET UP 
CALL or SEND SS which has been modified by "call control" by SIM into a USSD request ('05' result value), it 
shall supply the Text string2. The Text string2 shall contain the text returned within the Return Result message 
from the network for the USSD response. Text string2 is equivalent to the Text string in the Terminal Response 
to a SEND USSD command. 

- Channel data (if class "e" is supported): When the ME issues a successful TERMINAL RESPONSE for a 
RECEIVE DATA command it shall supply the following information. 

- The TERMINAL RESPONSE shall contain the Channel data data object (as defined in section 12.53). If this 
data object is included in a TERMINAL RESPONSE to a different command, it shall be ignored by the SIM. 

- Channel status (if class "e" is supported): When the ME issues a successful TERMINAL RESPONSE for a GET 
CHANNEL STATUS or an OPEN CHANNEL command, it shall supply the following information. 

- In response to a GET CHANNEL STATUS, TERMINAL RESPONSE shall contain as many Channel status 
data object (as defined in section 12.56) as there are available channel. In response to a OPEN CHANNEL, 
TERMINAL RESPONSE shall contain a Channel status data object. If this data object is included in a 
TERMINAL RESPONSE to a different command, it shall be ignored by the SIM. 

- Channel data length (if class "e" is supported): When the ME issues a successful TERMINAL RESPONSE for a 
RECEIVE DATA command or a SEND DATA, it shall supply the following information. 

- The TERMINAL RESPONSE shall contain the Channel data length data object (as defined in section 12.54). 
If this data object is included in a TERMINAL RESPONSE to a different command, it shall be ignored by 
the SIM. 

Bearer description (if class "e" is supported): When the ME issues an unsuccessful TERMINAL RESPONSE or 
a successful TERMINAL RESPONSE for an OPEN CHANNEL command, it shall supply the following 
information. 
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The TERMINAL RESPONSE shall contain the Bearer description data object (as defined in section 12.52). 
If this data object is included in a TERMINAL RESPONSE to a different command, it shall be ignored by 
the SIM. 

Buffer size (if class "e" is supported): When the ME issues an unsuccessful TERMINAL or a successful 
TERMINAL RESPONSE for a OPEN CHANNEL command, it shall supply the following information. 

- The TERMINAL RESPONSE shall contain the Buffer size data object (as defined in section 12.55). If this 
data object is included in a TERMINAL RESPONSE to a different command, it shall be ignored by the SIM. 

Under no circumstances shall the SIM wait indefinitely for a TERMINAL RESPONSE. 

Any future additional SIMPLE-TLV objects shall be included as Min = N and comprehension not required. This will 
ensure that any proactive command will end in a predictable way. 

Response parameters/data: None. 

6.9 Proactive SIM session and ME display interaction 

During a proactive session the ME display shall be refreshed by any display data contained in the first and each 
subsequent proactive command. The refresh shall occur once the ME has retrieved the proactive command using the 
Fetch instruction, following the proactive command pending status response. 

If no proactive command is pending (status response of '90 00' following the Terminal Response), then the session 
releases the display back into ME control. If this session was terminated in a backwards move, and the session was 
initiated from an Envelope command containing a Menu Selection, it is recommended that the display returns to the 
Setup Menu. 

If the text is to be sustained, the ME shall display the text of applicable DISPLAY TEXT commands beyond the 
sending of the TERMINAL RESPONSE and possibly beyond the end of the proactive session. 

6.10 Handling of unknown, unforeseen and erroneous messages 

6.10.1 General 

The procedures described in this subclause apply to the BER-TLV and SIMPLE-TLV data objects described in the 
present document. The purpose of this subclause is to allow greater flexibility in future versions of this document, and a 
greater predictability across different versions of this standard. 

The procedures described here specify how the ME and SIM shall behave when they receive a proactive command or 
response that is not fully compliant with the standards by which it was designed. A response will be made to the SIM by 
means of the "general result" field of the "result" 

If the ME sends a FETCH or TERMINAL RESPONSE to the SIM that contains values that the SIM does not 
understand, then the SIM shall issue the appropriate SWl / SW2 error response. The current proactive transaction shall 
be considered complete and neither the ME or the SIM shall take no further action with regard to it. In this case, unless 
the "General result" is "command performed..." then the SIM shall assume that the command was not carried out and 
that a permanent error exists with regard to that particular proactive command. If the command was performed, but the 
"additional information on result" field was not understood, then the SIM may attempt the command again at a later 
stage in the current GSM session. 

If the SIM has enough information to proceed (i.e. it has received all the data objects of the Minimum set) then it shall 
do so. 

6.1 0.2 Message too short 

Any information received that is not a complete tag and length shall be ignored. 
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6.10.3 Missing minimum information 

If a message is received that does not have all the mandatory elements in it, then if all of the minimum set elements are 
present then the receiver shall complete the command and report "command performed, with missing information". 

If the minimum set of elements is not complete, then the ME shall respond with "Error, required values are missing". 



6.1 0.4 Unl^nown Tag value 



If a BER-TLV object is received that has a tag that is understood, but contains SIMPLE-TLV components that have 
unknown tags, then provided the minimum set condition is fulfilled, the "comprehension required" bit of the tag shall 
determine how the receiving entity behaves. 

If the comprehension required flag in an unknown tag is set to '1', and the ME either does not recognize or is not 
expecting one or more of the SIMPLE-TLV objects in the message, then it shall respond with "Command data not 
understood by ME" . 

If the comprehension required flag is set to '0', then the ME shall read the length field that follows and ignore that 
object. In this case the ME will be able to carry out the command without the SIMPLE-TLV components that it cannot 
understand. It shall respond with "command performed with partial comprehension ". 



6.1 0.5 Unexpected Tag value 



If a BER-TLV object is received that contains elements that have recognisable tags, but which where not expected in 
the context of this message (for example, the ME sees SMS TDPU tag as part of TEXT FOR DISPLAY), then is shall 
discard that element. It shall then proceed as described for Unknown Tag values. 

If a received object has a tag that has already been received, then the first instance shall be used and any subsequent 
instances shall be discarded. 



6.10.6 Length errors 

If the total lengths of the SIMPLE-TLV data objects are not consistent with the length given in the BER-TLV data 
object, then the whole BER-TLV data object shall be rejected. The result field in the TERMINAL RESPONSE shall 
have the error condition "Command data not understood by ME". 

If the length of the BER-TLV data object is shorter than the length of the response data, the ME shall ignore response 
data following the complete BER-TLV data object. If the length of the BER-TLV data object is longer than the length 
of the response data, then sections 6.10.2. and 6.10.3 apply. 

6.1 0.7 Contents not understood 

If the contents of a SIMPLE-TLV data object contains a field with a value that is defined as reserved, then the whole 
SIMPLE-TLV data object shall be considered as invalid. It will then depend on the "comprehension required" bit of the 
relevant tag as to whether the whole BER-TLV data object shall be rejected, or whether that particular SIMPLE-TLV 
data object shall be ignored. 

If the contents of a BER-TLV object contains RFU bits or bytes, then these shall be ignored. 



6.1 0.8 Extended length data objects 



If a SIMPLE-TLV data object has a length longer than expected (i.e. more information has been added), then the 
receiver shall ignore this extra information to the end of the object. The end of the object shall be found by looking at 
the "length" field of that object. 

NOTE: If comprehension of the extra bytes is required, this can be achieved by the use of a reserved coding in an 
earlier field. 



£75/ 



3GPP TS 1 1 .1 4 version 8.1 6.0 Release 1 999 66 ETSI TS 1 01 267 V8.1 6.0 (2004-03) 

6.1 1 Proactive commands versus possible Terminal response 

The following table shows for each proactive command the possible terminal response returned (marked by a "•" 
character). 
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Proactive Command 




RE- 
FRESH 

'01' 


MORE 
TIME 

'02' 


POLL 
INTER- 
VAL 

'03' 


POLLING 
OFF 

'04' 


SETUP 

EVENT 

LIST 

'05' 


SETUP 
CALL 

'10' 


SENDSS 
'11' 


SEND 
USSD 

'12' 


SEND 
SMS 

'13' 


SEND 
DTMF 

'14' 


LAUNCH 

BROWSER 

'15' 


PLAY 
TONE 

'20' 


DISPLAY 
TEXT 

'21' 


GET 
INKEY 

'22' 


GET 

INPUT 

'23' 


SELECT 
ITEM 

'24' 


SETUP 

MENU 

'25' 


PRO- 
VIDE 
LOCAL 
INFO 
'26' 


TIMER 
MAN- 
AGE- 
MENT 
'27' 


SETUP 
IDLE 
MODE 
TEXT 

'28' 




Terminal response | 




'00' 


Command performed successfully 


• 


• 


• 


• 


• 


• 


• 


• 


• 


• 


• 


• 


• 


• 


• 


• 


• 


• 


• 


• 
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Proactive Command | 
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Backward move in the proactive SIM 
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No response from user 
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USSD/SS Transact terminated by user 
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7 Data download to SIM 

7.1 SMS-PP data download 
7.1.1 Procedure 

If the service "data download via SMS Point-to-point" is allocated and activated in the SIM Service Table (see 
TS 11.11 [20]), then the ME shall follow the procedure below: 

When the ME receives a Short Message with: 
protocol identifier = SIM data download, and 
data coding scheme = class 2 message, 

or 

when the ME receives a Short Message with: 

protocol identifier=ANSI-136 R-DATA (see 3G TS 23.040 [30]) and 

data coding scheme = class 2 message, and the ME chooses not to handle the message ( e.g. MEs not 

supporting EGPRS over TIA/EIA-136 do not need to handle the message), 

then the ME shall pass the message transparently to the SIM using the ENVELOPE (SMS-PP DOWNLOAD) 
command as defined below. 

The ME shall not display the message, or alert the user of a short message waiting. 

The ME shall wait for an acknowledgement from the SIM. 

If the SIM responds with '90 00', the ME shall acknowledge the receipt of the short message to the network using 
an RP-ACK message. 

If the SIM responds with '93 00', the ME shall either retry the command or send back an RP-ERROR message to 
the network with the TP-FCS value indicating 'SIM Apphcation Toolkit Busy' (see TS 23.040 [6]). 

- If the SIM responds with '9F XX', the ME shall use the GET RESPONSE command to get the response data. The 
response data from the SIM will be supplied by the ME in the TP-User-Data element of the RP-ACK message it 
will send back to the network (see TS 23.040 [6] and TS 24.01 1 [9]). The values of protocol identifier and data 
coding scheme in RP-ACK shall be as in the original message. 

If the SIM responds with '6F XX', the ME shall send back an RP-ERROR message to the network with the TP- 
FCS value indicating "SIM data download error". The values of protocol identifier and data coding scheme in 
RP-ERROR shall be as in the original message. 

NOTE: The preferred way for a SIM application to indicate a Data Download error is by using the specific code 
'9E XX' as desribed in the following bullet point. 

- If the ME has indicated in TERMINAL PROFILE that it supports the status word '9E XX' and if the SIM 
responds with '9E XX', the ME shall use the GET RESPONSE command to get the response data. The response 
data from the SIM will be supplied by the ME in the TP-User-Data element of the RP-ERROR message it will 
send back to the network (see TS 23.040 [6] and TS 24.01 1 [9]). The values of protocol identifier and data 
coding scheme in RP-ERROR shall be as in the original message. The value of the TP-FCS element of the RP- 
ERROR shall be "SIM data download error". 

If the service "data download via SMS-PP" is not allocated and activated in the SIM Service Table, and the ME receives 
a Short Message with the protocol identifier = SIM data download and data coding scheme = class 2 message, then the 
ME shall store the message in EFgjyj^ in accordance with TS 11.11 [20]. 

NOTE: MEs not supporting SIM Application Toolkit are likely to store data download messages in EFgjyjg, as if 
they were normal short messages. 
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7.1 .2 Structure of ENVELOPE (SMS-PP DOWNLOAD) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 



Description 


Section 


M/0 


IVIin 


Length) 


SMS-PP download tag 


13.1 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Device identities 


12.7 


M 


Y 


A 


Address 


12.1 





N 


B 


SIVIS TPDU (SMS-DELIVER) 


12.13 


M 


Y 


C 



Device identities: the ME shall set the device identities to: 
Source: Network 

Destination: SIM 

Address: The address data object holds the RP_Originating_Address of the Service Centre (TS-Service-Centre- 
Address), as defined in TS 24.01 1 [9]. 

Response parameters/data: 

It is permissible for the SIM not to provide response data. If the SIM responds with '90 00' then no response parameter 
shall be available, otherwise the SIM shall respond with '9F XX' or '9E XX' and the following data is returned: 



Byte(s) 


Description 


Lengtii 


1-X(X<128) 


SIIVI Acl<nowledgement 


X 



7.2 



Cell Broadcast data download 



7.2.1 



Procedure 



If the service "data download via SMS-CB" is allocated and activated in the SIM Service Table (see TS 11.11 [20]), 
then the ME shall follow the procedure below: 

When the ME receives a new Cell Broadcast message, the ME shall compare the message identifier of the Cell 
Broadcast message with the message identifiers contained in EF^gj^jj-,. 

If the message identifier is found in EpQ-gy^^^, the cell broadcast page is passed to the SIM using the 

ENVELOPE (CELL BROADCAST DOWNLOAD) command, defined below. The ME shall not display the 
message. 

If the message identifier of the incoming cell broadcast message is not found in EF^gjyjjj-), then the ME shall 
determine if the message should be displayed, by following the procedures in TS 23.041 [7] and TS 11.11 [20]. 

If the SIM responds with '93 00', the ME shall consider that the Cell Broadcast page has not been delivered 
successfully. The ME may retry to deliver the same Cell Broadcast page. 

The ME shall identify new cell broadcast pages by their message identifier, serial number and page values. 

7.2.2 Structure of ENVELOPE (CELL BROADCAST DOWNLOAD) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 
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Description 


Section 


M/0 


IVIln 


Length 


Cell Broadcast Download tag 


13.1 


M 


Y 


1 


Length (A+B) 


- 


M 


Y 


1 or 2 


Device identities 


12.7 


M 


Y 


A 


Cell Broadcast page 


12.5 


M 


Y 


B 



Device identities: the ME shall set the device identities to: 
Source: Network 

Destination: SIM 

Response parameters/data: None for this type of ENVELOPE command. 



8 



Menu Selection 



A set of possible menu options can be supplied by the SIM using the proactive command SET UP MENU. If the SIM 
has sent this command, and the user subsequently chooses an option or, the user requests help on it, the ME informs the 
SIM using this procedure. 



8.1 



Procedure 



If the service "menu selection" is allocated and activated in the SIM Service Table (see TS 11.11 [20]), then the ME 
shall follow the procedure below. 

When the ME receives a menu selection from one of the menu items defined by a "SET-UP MENU" command 
issued previously by the SIM, or the user has indicated the need to get help information on one of these menu 
items, then it shall pass the identifier of the selected menu item to the SIM using the ENVELOPE (MENU 
SELECTION) command, as defined below. 

If the SIM responds with '93 00', the ME shall not re-issue this particular envelope. 

8.2 Structure of ENVELOPE (MENU SELECTION) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 



Description 


Section 


M/0 


Min 


Length 


Menu Selection tag 


13.1 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Device identities 


12.7 


M 


Y 


A 


Item identifier 


12.10 


M 


Y 


B 


Help request 


12.21 





N 


C 



Device identities: the ME shall set the device identities to: 
Source: Keypad 

Destination: SIM 

Help request: inclusion of this data object depends upon whether the user actually selected the named menu item 
or just requested help information on it. If the user actually selected the menu item, this data object shall not be 
included. If the user indicated the need to get help information on the menu item, this data object shall be 
included. 

Response parameters/data: None for this type of ENVELOPE command. 
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9 Call Control and MO SMS control by SIM 

9.1 Call Control by SIM 

9.1 .1 Procedure for mobile originated calls 

If the service "call control" is allocated and activated in the SIM Service Table (see TS 11.11 [20]), then the ME shall 
follow the procedure below: 

For all call set-up attempts (even those resulting from a SET UP CALL proactive SIM command, from the 
Bearer Independant Protocol proactive SIM commands where CSD is selected, or those occurring when another 
call is already in progress), the ME shall first pass the call set-up details (dialled digits and associated 
parameters) to the SIM, using the ENVELOPE (CALL CONTROL) command defined below. SIM appUcations 
should take into account the following two exceptions: 

when the ME is managing automatic redial attempts, the ME may pass the call set-up details to the SIM for 
the first attempt only. The SIM can identify MEs which send ENVELOPE (CALL CONTROL) each time 
during redial attempts by evaluating the indication "Envelope Call Control always sent to the SIM during 
automatic redial mode" in the TERMINAL PROFILE. If the ME is sending ENVELOPE (CALL 
CONTROL) as part of a redial attempt, the call setup details shall be the same as the first with the exception 
of "Location Information" which shall be the current information; 

when the user is dialling "112" or an emergency call code stored in EFecc, for which the ME sets up an 
emergency call instead of passing the call set-up details to the SIM. 

If the SIM responds with '90 00', the ME shall set up the call with the dialled digits and other parameters as sent 
to the SIM. 

If the SIM responds with '93 00', the ME shall not set up the call and may retry the command. 

- If the SIM responds with '9F XX', the ME shall use the GET RESPONSE command to get the response data. The 
response data from the SIM shall indicate to the ME whether to set up the call as proposed, not set up the call, set 
up a call using the data supplied by the SIM, or instead send a supplementary service or USSD operation using 
the data supplied by the SIM. It is mandatory for the ME to perform the call set-up request and the 
supplementary service or USSD operation in accordance with the data from the SIM, if it is within the ME's 
capabilities to do so. If the SIM requires a call set-up or supplementary service or USSD operation that is 
beyond the ME's capabilities (e.g. the SIM maps a speech call to a data call, and the ME does not support data 
calls), then the ME shall not perform the call set-up request or supplementary service or USSD operation at all. It 
is possible for the SIM to request the ME to set up an emergency call by supplying the number " 112" as the 
response data. If the SIM supplies a number stored in EFecc, this shall not result in an emergency call. 

In the case where the initial call set-up request results from a proactive command SET UP CALL: 

- if the call control result is "not allowed", the ME shall inform the SIM using TERMINAL RESPONSE 
"interaction with call control by SIM or MO short message control by SIM, action not allowed". 

if the call set-up request is changed by call control in a supplementary service or USSD operation, and if the 
supplementary service or USSD operation is within the ME's capabilities, then the ME shall send this request to 
the network. The ME shall then send back a TERMINAL RESPONSE to the SET UP CALL command at the 
same time it would have done for the proactive command equivalent to the action requested by call control (i.e. 
SEND SS or SEND USSD). However, in that case, the TERMINAL RESPONSE shall contain the response data 
given in the response to ENVELOPE (CALL CONTROL) and a second Result TLV identical to the one given in 
response to the proactive command equivalent to the action requested by call control (i.e. SEND SS or SEND 
USSD). The mapping between the general result in the first Result TLV and the general result in the second 
Result TLV is given below : 

the general result "command performed, but modified by call control by SIM" shall be given in the first 
Result TLV if the general result of the second Result TLV is 'OX' or 'IX'. 

the general result "interaction with call control by SIM, temporary problem" shall be given in the first Result 
TLV if the general result of the second Result TLV is '2X'. 
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the general result "interaction with call control by SIM or MO short message control by SIM, permanent 
problem" shall be given in the first Result TLV if the general result of the second Result TLV is '3X'. 

if the call set-up request is changed by call control into a supplementary service or USSD operation, and if the 
supplementary service or USSD operation is beyond the ME's capabilities, then the ME shall send back a 
TERMINAL RESPONSE to the SET UP CALL command, without performing the supplementary service or 
USSD operation at all. In that case, the TERMINAL RESPONSE shall contain the response data given in the 
response to ENVELOPE (CALL CONTROL) and a second Result TLV identical to the one given in response to 
the proactive command equivalent to the action requested by call control (i.e. SEND SS or SEND USSD). The 
mapping between the general result in the first Result TLV and the general result in the second Result TLV is 
given below: 

the general result "interaction with call control by SIM or MO short message control by SIM, permanent 
problem" shall be given in the first Result TLV, and the general result "command beyond ME's capabilities" 
shall be given in the second Result TLV. 

If the ME supports the Last Number Dialled service, the ME shall update EFlnd with the call set-up details (digits string 
and associated parameters) corresponding to the initial user request. 

The ME shall then follow the call set-up procedure defined in TS 04.08 [8] or the supplementary service or USSD 
operation procedure defined in TS 24.080 [10]. 

9.1 .2 Procedure for Supplementary Services and USSD 

If the service "call control" is allocated and activated in the SIM Service Table (see TS 11.11 [20]), then for all 
supplementary service and USSD operations (including those resulting from a SEND SS or SEND USSD proactive 
SIM command), the ME shall first pass the supplementary service or USSD control string (corresponding to the 
supplementary service or USSD operation and coded as defined in TS 02.30 [4], even if this SS or USSD operation has 
been performed via a specific menu of the ME) to the SIM, using the ENVELOPE (CALL CONTROL) command 
defined below. The ME shall also pass to the SIM in the ENVELOPE (CALL CONTROL) command the current 
serving cell. 

The SIM shall respond in the same way as for mobile originated calls. The ME shall interpret the response as follows: 

If the SIM responds with '90 00', the ME shall send the supplementary service or USSD operation with the 
information as sent to the SIM. 

If the SIM responds with '93 00', the ME shall not send the supplementary service or USSD operation and may 
retry the command. 

- If the SIM responds with '9F XX', the ME shall use the GET RESPONSE command to get the response data. The 
response data from the SIM shall indicate to the ME whether to send the supplementary service or USSD 
operation as proposed, not send the SS or USSD operation, send the SS or USSD operation using the data 
supplied by the SIM, or instead set up a call using the data supplied by the SIM. It is mandatory for the ME to 
perform the supplementary service or USSD operation or the call set-up request in accordance with the data from 
the SIM, if it is within the ME's capabilities to do so. If the SIM requires a call set-up or supplementary service 
or USSD operation that is beyond the ME's capabilities (e.g. the SIM maps a USSD operation to a data call, and 
the ME does not support data calls), then the ME shall not the perform the call set-up request or supplementary 
service or USSD operation at all. 

In the case where the initial SS or USSD request results from a proactive command SEND SS or SEND USSD: 

- if the call control result is "not allowed", the ME shall inform the SIM using TERMINAL RESPONSE 
("interaction with call control by SIM or MO short message control by SIM, action not allowed"). 
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if the SS or USSD request is changed by call control in a call set-up request, then the ME shall set up the call 
using the data given by the SIM, if it is within the ME's capabilities to do so. If the SIM requires a call set-up 
that is beyond the ME's capabilities (e.g. the SIM maps a USSD operation to a data call, and the ME does not 
support data calls), then the ME shall not set up the call at all. The ME shall send back a TERMINAL 
RESPONSE to the initial proactive command at the same time it would have done for the proactive command 
equivalent to the action requested by call control (i.e. SET UP CALL). However, in that case, the TERMINAL 
RESPONSE shall contain the response data given in the response to ENVELOPE (CALL CONTROL) and a 
second Result TLV identical to the one given in response to the proactive command equivalent to the action 
requested by call control (i.e. SET UP CALL). The mapping between the general result in the first Result TLV 
and the general result in the second Result TLV is the same as the one described in section 9.1.1. 

If the ME supports the Last Number Dialled service, the ME shall update EFlnd with the supplementary service or 
USSD control string corresponding to the initial user request. 

The ME shall then follow the supplementary service or USSD operation procedure defined in TS 24.080 [10] or the call 
set-up procedure defined in TS 04.08 [8]. 

9.1 .3 Indication to be given to tine user 

The SIM may optionally include an alpha-identifier in the response data to the ENVELOPE (CALL CONTROL) 
message, in order to inform the user at the time the response is received by the ME. The use of this alpha identifier by 
the ME is described below : 

if the SIM responds with "allowed, no modification", then : 

if the alpha identifier is provided by the SIM and is not a null data object, the ME shall use it to inform the 
user during the call set-up; 

if the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), 
this is an indication that the ME should not modify the display corresponding to the initial user request; 

if the alpha identifier is not provided by the SIM, the ME may give information to the user concerning what 
is happening; 

if the SIM responds with "not allowed", then: 

if the alpha identifier is provided by the SIM and is not a null data object, the ME shall use it to inform the 
user. This is also an indication that the ME should not give any other information to the user on the reason of 
the barring; 

if the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), the 
ME may give information to the user concerning what is happening; 

if the alpha identifier is not provided by the SIM, the ME may give information to the user concerning what 
is happening. 

if the SIM responds with "allowed, with modifications", and the modified request is within the ME's capabilities, 
then : 

if the alpha identifier is provided by the SIM and is not a null data object, the ME shall use it to inform the 
user. The ME shall then not display the destination address or SS string given by the SIM. This is also an 
indication that the ME should not give any other information to the user on the changes made by the SIM to 
the initial user request; 

if the alpha identifier is provided by the SIM and is a null data object (i.e. length = '00' and no value part), 
this is an indication that the ME should not give any information to the user on the changes made by the SIM 
to the initial user request. The ME shall not display the destination address or SS string given by the SIM. 
The ME should not modify the display corresponding to the initial user request; 

if the alpha identifier is not provided by the SIM, the ME may indicate to the user that the initial user request 
has been changed. 

if the SIM responds with "allowed, with modifications" to a user-initiated request (i.e. a request not initiated by a 
proactive command), and the modified user request is beyond the ME's capabilities, then the ME may give 
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information to the user on the modified request and the fact that the modified request is beyond the ME's 
capabiHties, optionally using the alpha identifier, if one is provided by the SIM. 

if the SIM responds with "allowed, with modifications" to a request by a proactive command SET UP CALL, 
SEND SS or SEND USSD, and the modified request is beyond the ME's capabilities, then the ME shall not give 
any information to the user on the fact that the modified request is beyond the ME's capabilities, and shall give a 
TERMINAL RESPONSE to the proactive command (i.e. SET UP CALL, SEND SS or SEND USSD) as 
detailed in subsections 9.1.1 and 9.1.2. The responsibility to inform the user in this case lies with the SIM 
application which sent the proactive command. 

9.1.4 Interaction with Fixed Dialling Number 

It is permissible for the Fixed Dialling Number service to be enabled (see TS 11.11 [20]) at the same time as Call 
Control is allocated and activated in the SIM Service Table. 

If FDN is enabled and Call Control is activated, the ME shall follow this procedure: 

The ME shall check that the number (or the supplementary service control string) entered through the MMI is on 
the FDN list, in accordance with TS 02.07 [19]. 

If the MMI input does not pass the FDN check, the call (or the supplementary service operation) shall not be set 
up. 

If the MMI input does pass the FDN check, the ME shall pass the dialled digits (or the supplementary service 
control string) and other parameters to the SIM, using the ENVELOPE (CALL CONTROL) command. 

If the SIM responds with "allowed, no modification", the ME shall set up the call (or the supplementary service 
operation) as proposed. 

If the SIM responds with "not allowed", the ME shall not set up the call (or the supplementary service 
operation). 

If the SIM responds with "allowed with modifications", the ME shall set up the call (or supplementary service 
operation) in accordance with the response from the SIM. If the modifications involve changing the dialled digits 
(or the supplementary service control string), the ME shall not re-check this modified number (or string) against 
the FDN list. 

If the user wishes to enable or disable Fixed Dialling Number, the ME shall follow the procedure in TS 11.11 [20]. The 
state of the Call Control service shall have no effect on this procedure. 

9.1 .5 Support of Barred Dialling Number (BDN) service 

The BDN service shall be allocated and activated in the SIM Service Table only if Call Control is also allocated and 
activated in the SIM Service Table. 

If Barred Dialling Number service is enabled (see TS 11.11 [20]), when receiving the dialled number (or supplementary 
service control string) and other parameters from the ME, the SIM may check this information against those stored in 
EFgj-,j^ (examples of comparison methods are given in TS 02.07 [19]). 

If the SIM responds with "not allowed" (e.g., a match is made against a BDN), the ME shall not set up the call 
(or the supplementary service operation). 

If the SIM responds with "allowed, no modification", the ME shall set up the call (or the supplementary service 
operation) as proposed. 

If the SIM responds with "allowed with modifications", the ME shall set up the call (or the supplementary 
service operation) in accordance with the response from the SIM. If the modifications involve changing the 
dialled number (or the supplementary service control string), the ME shall not re-check this modified number (or 
string) against the FDN list when FDN is enabled. 

If the user wishes to enable or disable Barred Dialling Number, the ME shall follow the procedure in TS 11.11 [20] . 
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9.1 .6 Structure of ENVELOPE (CALL CONTROL) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 



Description 


Section 


IM/O 


IVIin 


Length) 


Call control tag 


13.1 


M 


Y 


1 


Length (A+B+C+D+E+F) 


- 


M 


Y 


1 or 2 


Device identities 


12.7 


M 


Y 


A 


Address or SS string or USSD string 


12.1, 12.14 
or 12.17 


M 


Y 


B 


Capability configuration parameters 1 


12.4 





N 


C 


Subaddress 


12.3 





N 


D 


Location information 


12.19 


M 


N 


E 


Capability configuration parameters 2 


12.4 





N 


F 



- Device identities: the ME shall set the device identities to: 
Source: ME 

Destination: SIM 

Address or SS string or USSD string: only one data object shall be sent to the SIM. 

For a call set-up, the address data object is used and holds the Called Party Number, as defined in TS 04.08 [8], 
to which the ME is proposing setting up the call. 

For a supplementary service, the SS string data object is used and holds the corresponding supplementary 

service. 

For a USSD operation, the USSD string data object is used and holds the corresponding USSD control string. 

SIM Applications and MEs should take into account that early implementations of SIM application Toolkit use 
the SS string data object for coding of USSD control strings (instead of the USSD string data object). This 
behaviour is only possible for USSD control strings consisting of digits (0-9,*,#). The SIM can identify MEs 
having this early implementation by evaluating the indication "USSD string data object supported in Call 
Control" in the TERMINAL PROFILE. The ME can identify SIMs having this early implementation by 
evaluating the indication "USSD string data object supported in Call Control" in the SIM Service Table. 

Capability configuration parameters: Only used for a call set-up, this contains the Bearer capabilities that the ME 
is proposing to send to the network. The first capability configuration parameters corresponds to the bearer 
capability 1 information element of a mobile originating SETUP message, as defined in TS 04.08 [8]. The 
second capability configuration parameters correspond to the bearer capability 2 information element of a mobile 
originating SETUP message, as defined in TS 04.08 [8]. If no capability configuration parameters are present, 
this shall indicate a speech call. 

Subaddress: Only used for a call set-up, this contains the called party subaddress that the ME is proposing to 
send to the network. If one is not present, this shall indicate that the ME is proposing not to send this information 
element to the network. 

Location information: This data object contains the identification (MCC, MNC, LAC, Cell Identity) of the 
current serving cell of the MS. The comprehension required flag of this data object in this command shall be set 
to '0'. 

Response parameters/data: 

It is permissible for the SIM to provide no response data, by responding with SWl / SW2 = '90 00'. If the SIM does not 
provide any response data, then this shall have the same meaning as "allowed, no modification". 
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Description 


Section 


M/0 


IVIin 


Length 


Call control result 


- 


M 


Y 


1 


Length (A+B+C+D+E+F) 


- 


M 


Y 


1 or 2 


Address or SS string or USSD string 


12.1, 12.14 
or 12.17 





N 


A 


Capability configuration parameters 1 


12.4 





N 


B 


Subaddress 


12.3 





N 


C 


Alpha identifier 


12.2 





N 


D 


BC repeat indicator 


12.42 


M/0 


N 


E 


Capability configuration parameters 2 


12.4 





N 


F 



Call control result: 
Contents: the command that the SIM gives to the ME concerning whether to allow, bar or modify the proposed call 
(or supplementary service operation). 

Coding: 

'00' = Allowed, no modification 

'01' = Not allowed 

'02' = Allowed with modifications 

Address or SS string or USSD string : Only one data object may be included if the SIM requests the call (or 
supplementary service or USSD operation) details to be modified. 

The SIM should take into account that early implementations of SIM Application Toolkit in some MEs are 
unable to support coding of USSD control strings in the USSD string data object and the SIM should instead use 
the SS string data object. The SIM can identify MEs having this early implementation by evaluating the 
indication "USSD string data object supported in Call Control" in the TERMINAL PROFILE. 

For a call set-up, if the address data object is not present, then the ME shall assume the Dialling number is not to 
be modified. 

For a supplementary service, if the SS string data object is not present, then the ME shall assume that SS is not to 
be modified. 

For a USSD operation, if the USSD string data object is not present, then the ME shall assume that the USSD 
operation is not to be modified. 

Capability configuration parameters: Only used for a call set-up, this data object is only required if the SIM 
requests the call details to be modified. The first capability configuration parameters corresponds to the bearer 
capability 1 information element of a mobile originating SETUP message, as defined in TS 04.08 [8]. The 
second capability configuration parameters corresponds to the bearer capability 2 information element of a 
mobile originating SETUP message, as defined in TS 04.08 [8]. If the capability configuration parameters are 
not present, then the ME shall assume the parameters are not to be modified. 

Subaddress: Only used for a call set-up, this data object is only required if the SIM requests the call details to be 
modified. If the subaddress is not present, then the ME shall assume the called party subaddress is not to be 
modified. If the subaddress supplied by the SIM is a null data object, then the ME shall not provide a called party 
subaddress to the network. A null data object shall have length = '00' and no value part. 

Alpha identifier: this data object is only required if the SIM requests a particular indication to be given to the 
user. The handling of this data object by the ME is described in section 9.L3. The comprehension required flag 
of this data object shall be set to '0'. 

BC repeat indicator: indicates how the 2 associated bearers shall be interpreted. The two modes to manage the 
bearers are the "alternate way" or "sequential way". The change of bearer occurs on a network event. This BC 
repeat indicator is conditioned to the presence of the second capability configuration parameters and is coded as 
defined in TS 04.08 [8]. 

It is mandatory for the SIM to provide at least one of the optional data objects if it has set the Call control result to 
"allowed with modifications". 
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9.2 MO Short Message Control by SIM 

9.2.1 Description 

If the service "MO Short Message Control" is allocated and activated in the SIM Service Table (see TS 11.11 [20]), 
then the ME shall follow the procedure below: 

For all MO short message attempts (even those resulting from a SEND SM proactive SIM command), the ME 
shall first pass the RP_destination_address of the service center and the TP_Destination_Address to the SIM, 
using the ENVELOPE (MO SHORT MESSAGE CONTROL) command defined below. The ME shall also pass 
to the SIM in the ENVELOPE (MO SHORT MESSAGE CONTROL) command the current serving cell 

If the SIM responds with '90 00', the ME shall send the short message with the addresses unchanged. 

If the SIM responds with '93 00', the ME shall not send the short message and may retry the command. 

- If the SIM responds with '9F XX', the ME shall use the GET RESPONSE command to get the response data. The 
response data from the SIM shall indicate to the ME whether to send the short message as proposed, not send the 
short message or send a short message using the data supplied by the SIM. It is mandatory for the ME to perform 
the MO short message request in accordance with the data from the SIM. 

The ME shall then follow the MO Short Message procedure defined in TS 24.01 1 [9]. 

In the case where the initial MO short message request results from a proactive command SEND SHORT MESSAGE, 
if the MO short message control result is "not allowed", the ME shall inform the SIM using TERMINAL RESPONSE, 
"interaction with call control by SIM or MO short message control by SIM, action not allowed". 

9.2.2 Structure of ENVELOPE (MO SHORT MESSAGE CONTROL) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 



Description 


Section 


M/0 


IVIin 


Length 


MO Short Message control tag 


13.1 


M 


Y 


1 


Length (A+B+C+D) 


- 


M 


Y 


1 or 2 


Device identities 


12.7 


M 


Y 


A 


Address data object 1 


12.1 


M 


Y 


B 


Address data object 2 


12.1 


M 


Y 


C 


Location information 


12.19 


M 


Y 


D 



Device identities: the ME shall set the device identities to: 
Source: ME 

Destination: SIM 

Address data object 1 : this address data object 1 contains the RP_Destination_Address of the Service Center to 
which the ME is proposing to send the short message. 

Address data object 2 : this address data object 2 contains the TP_Destination_Address to which the ME is 
proposing to send the short message. 

Location information : this data object contains the identification (MCC, MNC, LAC, Cell Identity) of the 
current serving cell of the MS. 

Response parameters/data: 

It is permissible for the SIM to provide no response data, by responding with SWl / SW2 = '90 00'. If the SIM does not 
provide any response data, then this shall have the same meaning as "allowed, no modification". 
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Description 


Section 


M/0 


IVlin 


Length 


MO short message control result 


- 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Address data object 1 


12.1 





N 


A 


Address data object 2 


12.1 





N 


B 


Alpha identifier 


12.2 





N 


C 



MO Short Message control result: 
Contents: the command that the SIM gives to the ME concerning whether to allow, bar or modify the proposed short 

message. 

Coding: 

'00' = Allowed, no modification 

'Or = Not allowed 

'02' = Allowed with modifications 

Address data object 1: if the address data object 1 is not present, then the ME shall assume the 
RP_Destination_Address of the Service Center is not to be modified. 

Address data object 2: if the address data object 2 is not present, then the ME shall assume the 
TP_Destination_Address is not to be modified. 

Alpha identifier: this data object is only required if the SIM requests a particular indication to be given to the 
user. The handling of this data object by the ME is described in section 9.2.3. 

The SIM shall provide the two optional address data objects if it has set the MO Short Message control result to 
"allowed with modifications". 

9.2.3 Indication to be given to tine user 

The SIM may optionally include an alpha-identifier in the response data to the ENVELOPE (MO SHORT MESSAGE 
CONTROL) message, in order to inform the user at the time the response is received by the ME. The use of this alpha 
identifier by the ME is identical to the one described in section 9. L3 relative to call control by SIM. 



10 Timer Expiration 

10.1 Description 

When a timer previously started by a TIMER MANAGEMENT proactive command expires, the ME shall pass the 
identifier of the timer that has expired and its value using the ENVELOPE (TIMER EXPIRATION) command, as 
defined below. 

If the SIM is busy and returns status '93 00', the ME shall retry until the command is accepted. 

NOTE: In order to avoid retrying periodically, the ME could retry after a TERMINAL RESPONSE processed by 
the SIM with status '90 00'. 

1 0.2 Structure of ENVELOPE (TIIVIER EXPIRATION) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 
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Command parameters/data: 



Description 


Section 


M/0 


IVIin 


Length 


Timer Expiration tag 


13.1 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Device identities 


12.7 


M 


Y 


A 


Timer identifier 


12.37 


M 


Y 


B 


Timer value 


12.38 


M 


Y 


C 



Device identities: the ME shall set the device identities to: 
Source: ME 

Destination: SIM 

Timer identifier: identifier of the timer that has expired. 

Timer value: difference between the time when this command is issued and the time when the timer was initially 
started. This should be as close as possible to the value of the timer given in the initial TIMER MANAGEMENT 
command. 

Response parameters/data: 

None 



11 



Event download 



A set of events for the ME to monitor can be supplied by the SIM using the proactive command SET UP EVENT LIST. 
If the SIM has sent this command, and an event which is part of the list subsequently occurs, the ME informs the SIM 
using the procedure below, relevant for that event. 

Processing within the ME resulting from this event shall proceed as normal, independent of sending the ENVELOPE 
command to the SIM. 

Where events occur while the SIM-ME interface is already busy, the ME shall queue events and send event download 
messages to the SIM in the order in which they occurred. 

Where events occur and the SIM responds with '93 00', the ME shall retry to deliver the event download messages to 
the SIM. 

11.1 MT call event 

11.1.1 Procedure 

If the MT call event is part of the current event list (as set up by the last SET UP EVENT LIST command, see section 
6.4.16), then when the ME receives an incoming SETUP message, the ME shall inform the SIM that this has occurred, 
by using the ENVELOPE (EVENT DOWNLOAD - MT call) command as defined below. 

1 1 .1 .2 Structure of ENVELOPE (EVENT DOWNLOAD - MT call) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 
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Command parameters/data: 



Description 


Section 


M/0 


IVIin 


Length 


Event download tag 


13.1 


M 


Y 


1 


Length (A+B+C+D+E) 


- 


M 


Y 


1 or 2 


Event list 


12.25 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Transaction identifier 


12.28 


M 


Y 


C 


Address 


12.1 


M/0 


N 


D 


Subaddress 


12.3 


M/0 


N 


E 



M/0 reflects that inclusion of the object is conditional, as defined in the text below. 

Event list: the event list object shall contain only one event (value part of length 1 byte), and ME shall set the 
event to: 
MX call 

Device identities: the ME shall set the device identities to: 
Source: Network 

Destination: SIM 

Transaction identifier: the transaction identifier data object shall contain one transaction identifier, and this shall 
be the Transaction Identifier in the SETUP message from the network. 

Address: The address data object holds the Calling Party BCD numberas received by the ME in the SETUP 
message. If the Calling Party BCD numberis included in the SETUP message, the ME shall include the Address 
object, otherwise the ME shall not include the Address object. 

Subaddress: The Subaddress data object holds the Calling Party Subaddress as received by the ME in the SETUP 
message. If the Calling Party Subaddress is included in the SETUP message, the ME shall include the 
Subaddress object, otherwise the ME shall not include the Subaddress object. 

Response parameters/data: 
None. 

1 1 .2 Call connected event 

11.2.1 Procedure 

If the call connected event is part of the current event list (as set up by the last SET UP EVENT LIST command, see 
section 6.4.16), then when the ME receives an incoming CONNECT message (in the case of an MO call), or when the 
ME sends an outgoing CONNECT message (in the case of an MT call), the ME shall inform the SIM that this has 
occurred, by using the ENVELOPE (EVENT DOWNLOAD - call connected) command as defined below. 

In the case of a call initiated through a SET UP CALL proactive command while the call connected event is part of the 
current event list, the ME shall send both the TERMINAL RESPONSE related to the proactive command, and the 
EVENT DOWNLOAD command, in the order TERMINAL RESPONSE first, ENVELOPE(EVENT DOWNLOAD - 
call connected) second. 

1 1 .2.2 Structure of ENVELOPE (EVENT DOWNLOAD - call connected) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 
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Command parameters/data: 



Description 


Section 


M/0 


IVIin 


Length 


Event download tag 


13.1 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Event list 


12.25 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Transaction identifier 


12.28 


M 


Y 


C 



Event list: the event list object shall contain only one event (value part of length 1 byte), and ME shall set the 
event to: 

Call connected 

Device identities: 

In the case of connecting at the near end (an MX call), the ME shall set the device identities to: 

Source: ME 

Destination: SIM 

In the case of connecting at the far end (an MO call), the ME shall set the device identities to: 
Source: Network 

Destination: SIM 

Transaction identifier: the transaction identifier data object shall contain one transaction identifier, and this shall 
be the Transaction Identifier in the CONNECT message. 

Response parameters/data: 
None. 

1 1 .3 Call disconnected event 

11.3.1 Procedure 

If the call disconnected event is part of the current event list (as set up by the last SET UP EVENT LIST command, see 
section 6.4.16), then if the ME is not in the CC UO (NULL) state (i.e. has sent or received a SETUP message, see TS 
TS 04.08 [8]), and in this state disconnects a call, the ME shall inform the SIM that this has occurred, by using the 
ENVELOPE (EVENT DOWNLOAD - call disconnected) command as defined below. This can happen as the result of 
the ME sending or receiving a DISCONNECT, RELEASE, or RELEASE COMPLETE message, or as the result of a 
radio link failure; if more than one of these occur within the same call, the ENVELOPE command shall be sent on the 
first occurrence. 

If the ME initiates the disconnection, or in the case of radio link failure, this is considered a "near end" disconnection, 
whereas a "far end" disconnection is defined as when the network initiates the disconnection. The ME shall set the 
Device Identities accordingly. 

1 1 .3.2 Structure of ENVELOPE (EVENT DOWNLOAD - Call disconnected) 

Direction: ME to SIM 

The command header is specified in TS ILl 1 [20]. 
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Command parameters/data: 



Description 


Section 


M/0 


IVIin 


Length 


Event download tag 


13.1 


M 


Y 


1 


Length (A+B+C+D) 


- 


M 


Y 


1 or 2 


Event list 


12.25 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Transaction identifier 


12.28 


M 


Y 


C 


Cause 


12.26 





N 


D 



Event list: the event list object shall contain only one event (value part of length 1 byte), and ME shall set the 
event to: 

Call disconnected 

Device identities: 

In the case of "near end" disconnection, the ME shall set the device identities to: 

Source: ME 

Destination: SIM 

In the case of "far end" disconnection, the ME shall set the device identities to: 
Source: Network 

Destination: SIM 

Transaction identifier: the transaction identifier data object shall contain a list of the transaction identifiers for 
each of the calls being disconnected. 

Cause: the cause shall reflect the CC-Cause information element sent or received in the DISCONNECT, 
RELEASE or RELEASE COMPLETE message (see TS TS 04.08 [8]) triggering the ENVELOPE command. If 
the Cause information element was not present in the message, or the Cause data object shall not be included. In 
the case of a radio link timeout, the Cause data object shall be included, with a value part of zero length. 

Response parameters/data: 
None. 

1 1 .4 Location status event 

11.4.1 Procedure 

If the location status event is part of the current event list (as set up by the last SET UP EVENT LIST command, see 
section 6.4.16), then when the ME enters the MM-IDLE state (see TS TS 04.08 [8]) with the result that either the 
Location status or Location information has been changed or updated, the ME shall inform the SIM that this has 
occurred, by using the ENVELOPE (EVENT DOWNLOAD - location status) command as defined below 

1 1 .4.2 Structure of ENVELOPE (EVENT DOWNLOAD - Location status) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 



Description 


Section 


M/0 


IVIin 


Length 


Event download tag 


13.1 


M 


Y 


1 


Length (A+B+C+D) 


- 


M 


Y 


1 or 2 


Event list 


12.25 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Location status 


12.27 


M 


Y 


C 


Location information 


12.19 


M/0 


N 


D 



M/O reflects that inclusion of the object is conditional, as defined in the text below. 
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Event list: the event list object shall contain only one event (value part of length 1 byte), and ME shall set the 
event to: 

Location status 

Device identities: the ME shall set the device identities to: 
Source: ME 

Destination: SIM 

Location status: This object shall contain the current service state of the MS. 

Location information: This object shall only be included if the Location status object indicates Normal Service. 
This object shall contain the details of the network, location area and cell that have been selected. 

Response parameters/data: 
None. 

1 1 .5 User activity event 

11.5.1 Procedure 

If the user activity event is part of the current event list (as set up by the last SET UP EVENT LIST command, see 
section 6.4. 16), then the ME shall follow the procedure below: 

When the ME next detects some user activity (e.g. a key-press, removal of key-lock), the ME shall inform the 
SIM that this has occurred, by using the ENVELOPE (EVENT DOWNLOAD - user activity) command as 
defined below. 

As a result of sending this command to the SIM, the ME shall remove the user activity event from its current 
event list. This is in order for the ME to report this event only once after the event has been requested by the 
SIM. 

1 1 .5.2 Structure of ENVELOPE (EVENT DOWNLOAD - User activity) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 



Description 


Section 


M/0 


IVIin 


Length 


Event download tag 


13.1 


M 


Y 


1 


Length (A+B) 


- 


M 


Y 


1 or 2 


Event list 


12.25 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 



Event list: the event list object shall contain only one event (value part of length 1 byte), and ME shall set the 
event to: 

User activity 

Device identities: the ME shall set the device identities to: 
Source: ME 

Destination: SIM 

Response parameters/data: 
None. 
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1 1 .6 Idle screen available event 

11.6.1 Procedure 

If the idle screen available event is part of the current event list (as set up by the last SET UP EVENT LIST command, 
see section 6.4.16), then the ME shall follow the procedure below: 

When the ME next enters a state where it would accept rather than reject a DISPLAY TEXT command of 
normal priority, the ME shall inform the SIM that this has occurred, by using the ENVELOPE (EVENT 
DOWNLOAD - idle screen available) command as defined below. 

As a result of sending this command to the SIM, the ME shall remove the idle screen available event from its 
current event list. This is in order for the ME to report this event only once after the event has been requested by 
the SIM. 

1 1 .6.2 Structure of ENVELOPE (EVENT DOWNLOAD - Idle screen 
available) 

Direction: ME to SIM 

The command header is specified in TS ILll [20]. 

Command parameters/data: 



Description 


Section 


M/0 


IVIin 


Length 


Event download tag 


13.1 


M 


Y 


1 


Length (A+B) 


- 


M 


Y 


1 or 2 


Event list 


12.25 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 



Event list: the event list object shall contain only one event (value part of length 1 byte), and ME shall set the 
event to: 

Idle screen available 

Device identities: the ME shall set the device identities to: 
Source: Display 

Destination: SIM 

Response parameters/data: 
None. 

1 1 .7 Card reader status event 

The following subclauses under U .7 apply only if class "a" is supported. 

11.7.1 Procedure 

If the card reader status event is part of the current event list (as set up by the last SET UP EVENT LIST command, see 
subclause 6.4.16), then when the ME detects one of the following changes: 

a card reader becomes available or unavailable (e.g. a removable card reader is attached), or 
a card is inserted or removed, 

the ME shall inform the SIM that this has occurred, by using the ENVELOPE (EVENT DOWNLOAD - card reader 
status) command as defined below. 

1 1 .7.2 Structure of ENVELOPE (EVENT DOWNLOAD - card reader status) 

Direction: ME to SIM 
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The command header is specified in TS 11.11 [20]. 
Command parameters/data: 



Description 


Section 


IVI/0 


Min 


Length 


Event download tag 


13.1 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Event list 


12.25 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Card reader status 


12.33 


M 


Y 


C 



Event list: the event list object shall contain only one event (value part of length 1 byte), and ME shall set the 
event to: 

Card reader status 

Device identities: the ME shall set the device identities to: 
Source: ME 

Destination: SIM 

Card reader status: the card reader status data object shall contain the identifier and status flags for the card 
reader that has generated the event. 

Response parameters/data: None for this type of ENVELOPE command. 

1 1 .8 Language selection event 

11.8.1 Procedure 

If the language selection event is part of the event list (as set up by the last SET UP EVENT LIST command, see 
subclause 6.4.16), then when the ME changes the currently used language, the ME shall inform the SIM that this has 
occurred, by using the ENVELOPE (EVENT DOWNLOAD - language selection) command as defined below. 

1 1 .8.2 Structure of ENVELOPE (language selection) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 



Description 


Section 


M/0 


IVIin 


Length 


Event download tag 


13.1 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Event list 


12.25 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Language 


12.45 


M 


Y 


C 



Event list: the event list object shall contain only one event (value part of length 1 byte), and ME shall set the 
event to: 

Language selection 

Device identities: the ME shall set the device identities to: 
Source: ME 

Destination: SIM 

Language: This object shall contain the currently used language of the ME. 

Response parameters/data: None for this type of ENVELOPE command. 
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1 1 .9 Browser Termination event 

11.9.1 Procedure 

If the browser termination event is part of the event list (as set up by the last SET UP EVENT LIST command, see 
subclause 6.4.16), then when the browser is terminated either by the user action or by an error, the ME shall inform the 
SIM that this has occurred, by using the ENVELOPE (EVENT DOWNLOAD - browser termination) command as 
defined below. 

1 1 .9.2 Structure of ENVELOPE (browser termination) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 



Description 


Section 


M/0 


IVIin 


Length 


Event download tag 


13.1 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Event list 


12.25 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Browser termination cause 


12.51 


M 


Y 


C 



Event list: the event list object shall contain only one event (value part of length 1 byte), and ME shall set the 
event to: 

Browser termination 

Device identities: the ME shall set the device identities to: 
Source: ME 

Destination: SIM 

Browser termination cause: This object shall contain the browser termination cause. 

Response parameters/data: None for this type of ENVELOPE command. 

11.10 Data available event 

All subclauses under 11.10 apply only if class "e" is supported. 

11.10.1 Procedure 

If the Data available event is part of the current event list (as set up by the last SET UP EVENT LIST command, see 
subclause 6.4.16), then, only if the targeted channel buffer is empty when new data arrives in it, the ME shall inform the 
SIM that this has occurred, by using the ENVELOPE (EVENT DOWNLOAD - Data available) command as defined 
below. 

1 1 .1 0.2 Structure of ENVELOPE (EVENT DOWNLOAD - Data available) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 
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Description 


Section 


IM/O 


Min 


Length 


Event download tag 


13.1 


M 


Y 


1 


Length (A+B+C+D) 


- 


M 


Y 


1 or 2 


Event list 


12.25 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Channel status 


12.56 


M 


Y 


C 


Channel data length 


12.54 


M 


Y 


D 



Event list: the Event list data object shall contain only one event (value part of length 1 byte), and ME shall 
set the event to: 
Data available 

Device identities: the ME shall set the device identities to: 
Source: ME 

Destination: SIM 

Channel status: this data object shall contain the status and identifier of the channel on which the event 
occurred. 

- Channel data length: this data object shall contain the number of bytes received, eg available in the channel 
buffer, (if more than 255 bytes are available, FF is used) 

Response parameters/data: None for this type of ENVELOPE command 

11.11 Channel Status event 

All subclauses under 11.11 apply only if class "e" is supported. 

11.11.1 Procedure 

If the Channel status event is part of the current event list (as set up by the last SET UP EVENT LIST command, see 
subclause 6.4.16), then, when the ME detects one of the following changes: 

a link is error, or 
any other error, 

which is not resulting from the execution of a proactive command, the ME shall inform the SIM that this has occurred, 
by using the ENVELOPE (EVENT DOWNLOAD - Channel status) command as defined below. 

The channel identifier for a data channel shall not be released during a card session until the CLOSE CHANNEL 
command for this channel identifier has been successfully executed. 

The ME shall not empty the Rx/Tx buffers during the card session until the CLOSE CHANNEL command has been 
successfully executed. 

1 1 .1 1 .2 Structure of ENVELOPE (EVENT DOWNLOAD - Channel status) 

Direction: ME to SIM 

The command header is specified in TS 11.11 [20]. 

Command parameters/data: 



Description 


Section 


IM/O 


Min 


Length 


Event download tag 


13.1 


M 


Y 


1 


Length (A+B+C) 


- 


M 


Y 


1 or 2 


Event list 


12.25 


M 


Y 


A 


Device identities 


12.7 


M 


Y 


B 


Channel status 


12.56 


M 


Y 


C 
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Event list: the Event list data object shall contain only one event (value part of length 1 byte), and ME shall 
set the event to: 
Channel status 

Device identities: the ME shall set the device identities to: 
Source: ME 

Destination: SIM 

Channel status: this data object shall contain the status and identifier of the channel on which the event 
occurred. 

Response parameters/data: None for this type of ENVELOPE command 



12 SIMPLE-TLV data objects 



This clause specifies the coding of the SIMPLE-TLV data objects, which are contained in a BER-TLV data object. 
SIMPLE-TLV data objects may be transferred across the interface in either direction. A SIMPLE-TLV data object 
consists of a tag of length one byte, a length indicator, which gives the number of bytes in the value field, and a value 
part of variable length, whose contents, meaning and coding are given below. 

Tag codings are given in subclause 13.3 for all SIMPLE-TLV data objects. 

'00' and 'FF' are never used as tag values for SIMPLE-TLVs. This is in alignment with ISO/IEC 7816-6 [17]. Padding 
characters are not allowed. 

For some of the SIMPLE-TLV data objects described, the length field shall be coded on 1 or 2 bytes (Y value) 
according to annex D, depending on the value of byte 1 . 

All bits and bytes indicated as RFU within all SIMPLE-TLV data objects shall be respectively set to and '00' by the 
sending entity. 

The handling of reserved values and RFU bits or bytes within all SIMPLE-TLV data objects at the receiving entity is 
described in subclause 6.10. 



12.1 Address 



Byte(s) 


Description 


Length 


1 


Address tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3 


TON and NPI 


1 


(Y-1)+4to 
(Y-1)+X+2 


Dialling number string 


X-1 



TON/NPI is coded as for EF^dn. 

Dialling number string is coded as for EF^qj^, and may include DTMF separators and DTMF digits, which the ME 
shall send in the same way as for EF^^j^ but without locally generating audible DTMF tones to the user. 

See TS 11 . 11 [20] for the coding of all EFs. 



12.2 Alpha identifier 



Byte(s) 


Description 


Length 


1 


Alpha identifier tag 


1 


2to(Y-1)+2 


Length (X) 


Y1 


(Y-1)+3to 
(Y-1)+X+2 


Alpha identifier 


X 
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The alpha identifier is coded as for EF^j-,f^. 
See TS 1 1 . 1 1 [20] for the coding of all EFs. 

12.3 Subaddress 



Byte(s) 


Description 


Length 


1 


Subaddress tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3to 
(Y-1)+X+2 


Subaddress 


X 



Subaddress contains information as defined for this purpose in TS 04.08 [8] (calling party subaddress or called party 
subaddress). All information defined in TS 04.08 shall be given in the value part of the data object, except the 
information element identifier and the length of subaddress contents (which is given by the length part of the data 
object). 

12.4 Capability configuration parameters 



Byte(s) 


Description 


Length 


1 


Capability configuration parameters tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3to 
(Y-1)+X+2 


Capability configuration parameters 


X 



Capability configuration parameters are coded as for EF^^^^p. If it is being provided by the SIM, the SIM shall supply all 
information required to complete the Bearer Capability Information Element in the Call Set-up message (see 
TS 04.08 [8]). Any unused bytes at the end of the value part shall be coded 'FF'. 

See TS 11 . 11 [20] for the coding of all EFs. 

NOTE: The second byte of this TLV contains the Length of the TLV and the third byte contains the Length of the 
bearer capability contents, followed by the actual contents. 



12.5 Cell Broadcast Page 



Byte(s) 


Description 


Length 


1 


Cell Broadcast page tag 


1 


2 


Length = '58' (88 decimal) 


1 


3-90 


Cell Broadcast page 


88 



The Cell Broadcast page is formatted in the same way as described in TS 23.041 [7]. 



12.6 Command details 



Byte(s) 


Description 


Length 


1 


Command details tag 




2 


Length = '03' 




3 


Command number 




4 


Type of command 




5 


Command Qualifier 





Command number 
For contents and coding, see subclause 6.5.1. 
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Type of command: 
Contents: The Type of Command specifies the required interpretation of the data objects which follow, and the 
required ME procedure. 

Coding: 

See section 13.4 

The ME shall respond to reserved values (i.e. values not listed) with the result "Command type not understood". 

Command Qualifier: 
Contents: Qualifiers specific to the command. 

Coding: 

- REFRESH; 

'00' =SIM Initialization and Full File Change Notification; 

'01' = File Change Notification; 

'02' = SIM Initialization and File Change Notification; 

'03' = SIM InitiaHzation; 

'04' = SIM Reset; 

'05' to 'FF' = reserved values. 

- MORE TIME; 

This byte is RFU. 

- POLL INTERVAL; 

This byte is RFU. 

- POLLING OFF; 

This byte is RFU. 

- SET UP CALL; 

'00' = set up call, but only if not currently busy on another call; 

'01' = set up call, but only if not currently busy on another call, with redial; 

'02' = set up call, putting all other calls (if any) on hold; 

'03' = set up call, putting all other calls (if any) on hold, with redial; 

'04' = set up call, disconnecting all other calls (if any); 

'05' = set up call, disconnecting all other calls (if any), with redial; 

'06' to 'FF' = reserved values. 

- SEND DTMF; 

This byte is RFU. 

- SET UP EVENT LIST; 

This byte is RFU. 

- SEND SS; 

This byte is RFU. 

- SEND USSD; 

This byte is RFU. 

- SEND SHORT MESSAGE; 

bit 1 : = packing not required 

1 = SMS packing by the ME required 
bits 2-8: =0 RFU. 

- PLAY TONE; 

This byte is RFU. 

- DISPLAY TEXT, 
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bit 1 : = normal priority 

1 = high priority 
bits 2-7: = RFU 
bit 8: = clear message after a delay 

1 = wait for user to clear message 

- GET INKEY, 

bit 1 : = digits (0-9, *, # and +) only 

1 = alphabet set; 
bit 2: = SMS default alphabet 

1 = UCS2 alphabet 
bit 3: = character sets defined by bit 1 and bit 2 are enabled 

1 = character sets defined by bit 1 and bit 2 are disabled and the "Yes/No" response is requested 
bits 4-7: = RFU 
bit 8: = no help information available 

1 = help information available 

- GET INPUT, 

bit 1 : = digits (0-9, *, #, and +) only 

1 = alphabet set 
bit 2: = SMS default alphabet 

1 = UCS2 alphabet 
bit 3: = ME may echo user input on the display 

1 = user input shall not be revealed in any way (see note) 
bit 4: = user input to be in unpacked format 

1 = user input to be in SMS packed format 
bits 5 to 7: = RFU 
bit 8: = no help information available 

1 = help information available 

NOTE: Where user input is not to be revealed, the ME may provide an indication of key entries, such as by 
displaying "*"s. See subclause 6.4.3 for more information on the character set available in this mode. 

- SELECT ITEM. 

bit 1 : = presentation type is not specified 

1 = presentation type is specified in bit 2 
bit 2: = presentation as a choice of data values if bit 1 = '1' 

1 = presentation as a choice of navigation options if bit 1 is '1' 
bit 3: = no selection preference 

1 = selection using soft key preferred 
bits 4 to 7: = RFU 
bit 8: = no help information available 

1 = help information available 

- SET UP MENU. 

bit 1 : = no selection preference 

1 = selection using soft key preferred 
bits 2 to 7: = RFU 
bit 8: = no help information available 

1 = help information available 

- PROVIDE LOCAL INFORMATION 

'00' = Location Information (MCC, MNC, LAC and Cell Identity) 

'01' = IMEIoftheME 

'02' = Network Measurement results 

'03' = Date, time and time zone 

'04' = Language setting 

'05' = Timing Advance 

'06' to 'FF' = Reserved 

- SET UP IDLE MODE TEXT 

This byte is RFU. 
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- PERFORM CARD APDU (if class "a" is supported) 

This byte is RFU. 

- POWER OFF CARD (if class "a" is supported) 

This byte is RFU. 

- POWER ON CARD (if class "a" is supported) 

This byte is RFU. 

- GET READER STATUS (if class "a" is supported) 

'00' = Card reader status 
'01' = Card reader identifier 

- TIMER MANAGEMENT 

bits 1 to 2 00 = start 

01 = deactivate 

10 = get current value 

1 1 = RFU 
bits 3 to 8 RFU 

- RUN AT COMMAND (if class "b" is supported) 

This byte is RFU. 

- LANGUAGE NOTIFICATION. 

bit 1 : = non-specific language notification 

1 = specific language notification 
bits 2 to 8: = RFU 

- LAUNCH BROWSER 

'00' = launch browser, if not already launched ; 

'01' = not used ; 

'02' = use the existing browser (the browser shall not use the active existing secured session) ; 

'03' = close the existing browser session and launch new browser session; 

'04' = not used ; 

'05' to 'FF' = RFU. 

- OPEN CHANNEL (if class "e" is supported) 

bit 1 : = on demand link establishment 

1 = immediate link establishment 
bit 2: = no automatic reconnection 

1 = automatic reconnection 
bits 3 to 8: = RFU 

- CLOSE CHANNEL (if class "e" is supported) 

This byte is RFU. 

- RECEIVE DATA (if class "e" is supported) 

This byte is RFU 

- SEND DATA (if class "e" is supported) 

bit 1 : = store data in Tx buffer 

1 = Send data immediately 
bits 2 to 8: = RFU 

- GET CHANNEL STATUS (if class "e" is supported) 

This byte is RFU 

The ME shall respond to reserved values with the result "Command type not understood". 
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12.7 Device identities 



Byte(s) 


Description 


Length 


1 


Device identities tag 


1 


2 


Length = '02' 


1 


3 


Source device identity 


1 


4 


Destination device identity 


1 



Source device identity 
Contents: the source device for information held in the data objects which follow. 

Destination device identity 
Contents: the destination device for information held in the data objects which follow. 

NOTE: Only some combinations of Type of Command, Data Download type and Device identities are allowed. 
These are defined in clause 14. 

Coding: both Source and Destination device identities are coded as follows: 

- '01' = Keypad 
'02' = Display 
'03' = Earpiece 

'10' to '17' = Additional Card Reader x (0 to 7). Value assigned by ME. 

'21' to '27' = Channel x (1 to 7). Value assigned by ME (if class "e" is supported). 

- '81' = SIM 

- '82' = ME 

- '83' = Network 

All other values are reserved. 



12.8 Duration 



Byte(s) 


Description 


Length 


1 


Duration tag 


1 


2 


Length = '02' 


1 


3 


Time unit 


1 


4 


Time interval 


1 



Time unit 
Contents: time unit used; minutes, seconds or tenths of seconds. 

Coding: 

'OO'Minutes 

'01 'Seconds 

'02'Tenths of seconds 

All other values are reserved. 

Time interval 
Contents: the length of time required, expressed in units. 

Coding: The time interval is coded in integer multiples of the time unit used. The range is from 1 unit to 255 units. 
The encoding is: 

'00': reserved 
- '01': 1 unit 
'02': 2 units 

'FF': 255 units 
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12.9 Item 



Byte(s) 


Description 


Length 


1 


Item tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3 


Identifier of item 


1 


(Y-1)+4to 
(Y-1)+X+2 


Text string of item 


X-1 



The identifier is a single byte between '01' and 'FF'. Each item shall have a unique identifier within an Item list. 

The text string is coded in the same way as the alpha identifier for EF^y^j^. Any unused bytes at the end of the value part 
shall be coded 'FF'. 



12.10 Item identifier 



Byte(s) 


Description 


Length 


1 


Item identifier tag 


1 


2 


Length = '01' 


1 


3 


Identifier of item chosen 


1 



The identifier is a single byte between '01' and 'FF', exactly the same as for the Item data object. A null item identifier is 
coded '00'. 



12.11 Response length 



Byte(s) 


Description 


Length 


1 


Response length tag 


1 


2 


Length = '02' 


1 


3 


IVIinimum length of response 


1 


4 


IVIaximum length of response 


1 



The range of length is between '00' and 'FF'. A minimum length coding of '00' indicates that there is no minimum length 
requirement; a maximum length coding of 'FF' indicates that there is no maximum length requirement. If a fixed length 
is required the minimum and maximum values are identical. 

12.12 Result 



Byte(s) 


Description 


Length 


1 


Result tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3 


General result 


1 


(Y-1)+4to 
(Y-1)+X+2 


Additional information on result 


X-1 



General result 
Contents: General result specifies the result and indicates appropriate SIM action: 

Coding: 

'00' = Command performed successfully; 

'01' = Command performed with partial comprehension; 

'02' = Command performed, with missing information; 

'03' = REFRESH performed with additional EFs read; 

'04'= Command performed successfully, but requested icon could not be displayed; 

'05' = Command performed, but modified by call control by SIM; 
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'06' = Command performed successfully, limited service; 

'07' = Command performed with modification (if class "e" is supported); 

'10' = Proactive SIM session terminated by the user; 

'11' = Backward move in the proactive SIM session requested by the user; 

'12' = No response from user; 

'13' = Help information required by the user; 

'14' = USSD or SS transaction terminated by the user. 

Results 'OX' and 'IX' indicate that the command has been performed. 

'20' = ME currently unable to process command; 

'21' = Network currently unable to process command; 

'22' = User did not accept the proactive command; 

'23' = User cleared down call before connection or network release; 
- '24' = Action in contradiction with the current timer state; 

'25' = Interaction with call control by SIM, temporary problem; 

'26' = Launch browser generic error code. 

Results '2X' indicate to the SIM that it may be worth re-trying the command at a later opportunity. 
'30' = Command beyond ME's capabilities; 
'31' = Command type not understood by ME; 
'32' = Command data not understood by ME; 
'33' = Command number not known by ME; 

- '34' = SS Return Error; 

- '35' = SMS RP-ERROR; 

'36' = Error, required values are missing; 

- '37' = USSD Return Error; 

'38' = MultipleCard commands error, if class "a" is supported; 

'39' = Interaction with call control by SIM or MO short message control by SIM, permanent problem; 

'3 A' = Bearer Independent Protocol error (if class "e" is supported). 

Results '3X' indicate that it is not worth the SIM re-trying with an identical command, as it will only get the same 
response. However, the decision to retry lies with the SIM application. 

The SIM application should avoid a rapid sequence of repeated retried commands as this may be detrimental to ME 
performance. 

All other values are reserved. 

Additional information 

Contents: For the general result "Command performed successfully", some proactive commands require additional 
information in the command result. This is defined in the subclauses below. For the general results '20', '21', '26', 
'34', '35', '37', '38' and '39' and '3A', it is mandatory for the ME to provide a specific cause value as additional 
information, as defined in the subclauses below. For the other general results, the ME may optionally supply 
additional information. If additional information is not supplied, then the length of the value part of the data 
object need only contain the general result. 

12.12.1 Additional information for SEND SS 

When the ME issues a successful COMMAND RESULT for a SEND SS proactive command, it shall also include the 
Operation Code and Parameters included in the Return Result component from the network, as additional information. 

The first byte of the additional information shall be the SS Return Result Operation code, as defined in TS 24.080 [10]. 

The rest of the additional information shall be the SS Return Result Parameters, as defined in TS 24.080 [10]. 



£75/ 



3GPP TS 1 1 .1 4 version 8.1 6.0 Release 1 999 97 ETSI TS 1 01 267 V8.1 6.0 (2004-03) 

12.12.2 Additional information for ME problem 

For the general result "ME currently unable to process command", it is mandatory for the ME to provide additional 
information, the first byte of which to be as defined below: 

'00' = No specific cause can be given; 
'01 ' = Screen is busy; 
'02' = ME currently busy on call; 
'03' = ME currently busy on SS transaction; 
'04' = No service; 
'05' = Access control class bar; 
'06' = Radio resource not granted; 
'07' = Not in speech call; 
'08' = ME currently busy on USSD transaction; 
- '09' = ME currently busy on SEND DTMF command. 

All other values shall be interpreted by the SIM as '00'. The coding '00' shall only be used by the ME if no others apply. 

12.12.3 Additional information for network problem 

For the general result "network currently unable to process command", it is mandatory for the ME to provide additional 
information. The first byte shall be the cause value of the Cause information element returned by the network (as 
defined in TS 04.08 [8]). Bit 8 shall be set to '1'. One further value is defined: 

'00' = No specific cause can be given. 

All other values shall be interpreted by the SIM as '00'. The coding '00' shall only be used by the ME if no others apply. 

12.12.4 Additional information for SS problem 

For the general result "SS Return Error", it is mandatory for the ME to provide additional information. The first byte 
shall be the error value given in the Facility (Return result) information element returned by the network (as defined in 
TS 24.080 [10]). One further value is defined: 

'00' = No specific cause can be given. 

All other values shall be interpreted by the SIM as '00'. The coding '00' shall only be used by the ME if no others apply. 

12.12.5 Additional information for SMS problem 

For the general result "SMS RP -ERROR", it is mandatory for the ME to provide additional information. The first byte 
shall be the cause value given in the RP-Cause element of the RP -ERROR message returned by the network (as defined 
in TS 24.01 1 [9]), with bit 8 = 0. One further value is defined: 

'00' = No specific cause can be given. 

All other values shall be interpreted by the SIM as '00'. Specific cause '00' shall only be used by the ME if no others 
apply. 

12.12.6 Not used 

12.12.7 Additional information for USSD problem 

For the general result "USSD Return Error", the ME shall provide additional information. The first byte shall be the 
error value given in the Facility (Return result) information element returned by the network (as defined in TS 24.080 
[10]). One further value is defined: 

'00' = No specific cause can be given. 

All other values shall be interpreted by the SIM as '00'. 
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The coding '00' shall only be used by the ME if no others apply. 

12.12.8 Additional information for interaction witin call control or MO SM 
control 

For the general result "interaction with call control by SIM or MO short message control by SIM, permanent problem", 
it is mandatory for the ME to provide additional information, the first byte of which to be as defined below: 

'00' = No specific cause can be given; 

'01 ' = Action not allowed; 

'02' = The type of request has changed. 

All other values shall be interpreted by the SIM as '00'. The coding '00' shall only be used by the ME if no others apply. 

12.12.9 Additional information for MultipleCard commands 

This subclause applies only if class "a" is supported. 

For the general result "MultipleCard commands error", it is mandatory for the ME to provide additional information, the 
first byte of which is defined below: 

'00' = No specific cause can be given; 
'01' = Card reader removed or not present; 
'02' = Card removed or not present; 
'03' = Card reader busy; 
'04' = Card powered off; 

- '05' = C-APDU format error; 

- '06' = Mute card; 

'07' = Transmission error; 
'08' = Protocol not supported; 
'09' = Specified reader not valid. 

All other values shall be interpreted by the SIM as '00'. 

The coding '00' shall only be used by the ME if no others apply. 

12. 12. 10 Additional information for Launch Browser problem 

For the general result "launch browser generic error code", it is mandatory for the ME to provide additional information, 
the first byte of which to be as defined below: 

'00' = No specific cause can be given; 

'Or = Bearer unavailable; 

'02' = Browser unavailable; 

'03' = ME unable to read the provisioning data. 

All other values shall be interpreted by the SIM as 'OO'.The coding '00' shall only be used by the ME if no others apply. 

12.12.1 1 Additional information for Bearer Independent Protocol 

This subclause applies only if class "e" is supported. 

For the general result " Bearer Independent Protocol error ", it is mandatory for the ME to provide additional 
information, the first byte of which is defined below: 
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'00' = No specific cause can be given; 

'01' = No channel available; 

'02' = Channel closed; 

'03' = Channel identifier not valid; 

'04' = Requested buffer size not available; 

'05' = Security error (unsuccessful authentication); 

'06' = Requested SlM/ME interface transport level not available. 

All other values shall be interpreted by the SIM as '00'. 

The coding '00' shall only be used by the ME if no others apply. 

12.13 SMSTPDU 



Byte(s) 


Description 


Length 


1 


SMS TPDU tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3to 
(Y-1)+X+2 


SMSTPDU 


X 



The TPDU is formatted as described in TS 23.040 [6]. 

Where the TPDU is being sent from the SIM to the ME (to be forwarded to the network), and where it includes a TP- 
Message-Reference which is to be incremented by the ME for every outgoing message, the TP -Message-Reference as 
provided by the SIM need not be the valid value. TP-Message-Reference shall be checked and corrected by the ME to 
the value described in TS 23.040 [6]. 



12.14 SS String 



Byte(s) 


Description 


Length 


1 


SS string tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3 


TON and NPI 


1 


(Y-1)+4to 
(Y-1)+X+2 


SS or USSD string 


X-1 



TON/NPl and SS or USSD control string are coded as for EF^qj^, where the ADN record relates to a Supplementary 
Service Control string. See TS 11.11 [20] for the coding of EF^j-,j^. 



12.15 Text string 



Byte(s) 


Description 


Length 


1 


Text string tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3 


Data coding scheme 


1 


(Y-1)+4to 
(Y-1)+X+2 


Text string 


X-1 



A null text string shall be coded with Length = '00', and no Value part. 

Data coding scheme is coded as for SMS Data coding scheme defined in TS 23.038 [5]. 

12.15.1 Coding of text in unpacked format 

This is indicated by the data coding scheme having a value of 8 bit data. Other parts of the data coding scheme shall be 
ignored. 
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This string use the SMS default 7-bit coded alphabet as defined in TS 23.038 [5] with bit 8 set to 0. It may or may not 
include formatting characters, but all such formatting characters shall be taken from the set given in the SMS alphabet. 

NOTE: This is exactly the same format as is used for EF^pj^ alpha-identifiers. It is also the same as SMS 
messages that have been "unpacked". 

1 2. 1 5.2 Coding of text in pacl^ed format 

This is indicated by the data coding scheme having a value of 7 bit GSM default alphabet. Other parts of the data coding 
scheme shall be ignored. 

This string shall use the SMS default 7-bit coded alphabet, packed into 8-bit octets, as defined in TS 23.038 [5]. It may 
or may not include formatting characters, but all such formatting characters shall be taken from the set given in the SMS 
alphabet. 

If the total number of characters in the text string equals (8n-l) where n= 1,2,3 etc. then there are 7 spare bits at the end 
of the message. To avoid the situation where the receiving entity confuses 7 binary zero pad bits as the @ character, the 
carriage return (i.e. <CR>) character shall be used for padding in this situation, as defined in TS 23.038 [5]. 

NOTE: This is the same format as is used in SMS messages to and from the network. 

1 2. 1 5.3 Coding of text in 1 6 bits UCS2 alpinabet format 

This is indicated by the data coding scheme having a value of 16 bit UCS2 alphabet. Other parts of the data coding 
scheme shall be ignored. 

This string shall use the UCS2 alphabet if the UCS2is supported, as defined in TS 23.038 [5]. It may or may not include 
formatting characters, but all such formatting characters shall be taken from the set given in the UCS2 alphabet. 

NOTE: This is the same format as is used in SMS messages to and from the network. 

12.16 Tone 



Byte(s) 


Description 


Length 


1 


Tone tag 


1 


2 


Length = '01' 


1 


3 


Tone 


1 



Tone 
Contents: Tones can be either the standard supervisory tone, as defined in TS 02.40 [18], or proprietary tones 
defined by the ME manufacturer. The code values for proprietary tones shall be supported by the ME. If 
proprietary tones are not supported the ME shall map these codings to tones that it can generate. The tones to be 
used are left as an implementation decision by the manufacturer. 

Coding: 



Standard supervisory tones: 

'Or Dial tone 

'02' Called subscriber busy 

'03' Congestion 

'04' Radio path acknowledge 

'05' Radio path not available / Call dropped 

'06' Error / Special information 

'07' Call waiting tone 

'08' Ringing tone 

ME proprietary tones: 

'10' General beep 

'11 ' Positive acknowledgement tone 

'12' Negative acknowledgement or error tone 

All other values are reserved. 
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12.17 USSD String 



Byte(s) 


Description 


Length 


1 


USSD string tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3 


Data coding scheme 


1 


(Y-1)+4to 
(Y-1)+X+2 


USSD string 


X-1 



The Data coding scheme is coded as for Cell Broadcast defined in TS 23.038 [5]. The coding of the USSD string is 
defined in TS 02.30 [4]. 

12.18 File List 



Byte(s) 


Description 


Length 


1 


File List tag 


1 


2to(Y-1)+2 


Length (X) of bytes following 


Y 


(Y-1)+3 


Number of files (n) 


1 


(Y-1)+4to 
(Y-1)+X+2 


Files 


X-1 



Number of files: 

This is the number of files that will be described in the following list. 

Files: 

Full paths are given to files. Each of these shall be at least 4 octets in length (e.g. '3F002FE2' or '3F007F206FAD'). 

Each entry in the file description is composed of two bytes, where the first byte identifies the type of file (see TS 11.11). 

An entry in the file description shall therefore always begin with '3FXX'. There can be any number of Dedicated File 
entries between the Master File and Elementary File. There shall be no delimiters between files, as this is implied by the 
fact that the full path to any EF starts with '3FXX' and ends with an Elementary type file. 

12.19 Location Information 



Byte(s) 


Description 


Length 


1 


Location Information tag 


1 


2 


Length = '07' 


1 


3-5 


Mobile Country & Network Codes (MCC & MNC) 


3 


6-7 


Location Area Code (LAC) 


2 


8-9 


Cell Identity Value (Cell ID) 


2 



The mobile country code (MCC), the mobile network code (MNC), the location area code (LAC) and the cell ID are 
coded as in TS 04.08 [8]. 

12.20 IMEI 



Byte(s) 


Description 


Length 


1 


IMEI tag 


1 


2 


Length = '08' 


1 


3-10 


IMEI of the ME 


8 



The IMEI is coded as in TS 04.08 [8]. 
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12.21 Help Request 



Byte(s) 


Description 


Length 


1 


Help Request tag 


1 


2 


Length = '00' 


1 



12.22 Network Measurement Results 



Byte(s) 


Description 


Length 


1 


Network Measurement Results tag 


1 


2 


Length = '10' 


1 


3-18 


Network Measurement Results 


16 



The Network Measurement Results are coded as for the Measurement Results information element in TS 04.08 [8], 
starting at octet 2 (the lEI is removed, as this information is duplicated by the data object tag). 

12.23 Default Text 

The coding of this data object is the same as for the Text String data object (see subclause 12.15) with the exception that 
the Default Text tag has a specific value (see subclause 13.3). 

12.24 Items Next Action Indicator 



Byte(s) 


Description 


Length 


1 


Items Next Action Indicator tag 


1 


2 


Length (X) 


1 


3 to 3+X-1 


Items Next Action Indicator list 


X 



Contents : Each item of a list of items has a next action indicator coded on one byte. The length of the Items Next 
Action Indicator list shall be the number of items of the list of items (X shall be the number of items in the list). 
The order of each item next action indicator, shall reflect the order o the items in the list of items. 

The Item Next action indicator gives the possible actions that will be initiated by the SIM in case of selection by the 
user. 

Coding : If the value is equal to '00' or if the value is reserved (that is, value not listed), the ME shall ignore the next 
action indicator type. 

See subclause 13.4 for further information. 

Example : 

For the following list of items : 
-item#l; 

- item #2; 
-item #3; 

- item #n, 

the Items Next Action Indicator (NAI) shall be as follows : 



Tag Length NAI#1 NAI#2 NAI#3 ... NAI#n 
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12.25 Event list 



Byte(s) 


Description 


Length 


1 


Event list tag 


1 


2 to Y+1 


Length (X) of bytes following 


Y 


Y+2to 
X+Y+1 


Event list 


X 



Event list 
Contents: A list of events, of variable length. Each byte in the list defines an event. Each event type shall not appear 
more than once within the list. 

Coding: Each byte in the event list shall be coded with one of the values below: 
- '00' = MT call 

'01' = Call connected 

'02' = Call disconnected 

'03' = Location status 

'04' = User activity 

'05' = Idle screen available 

'06' = Card reader status (if class "a" is supported) 

'07' = Language selection 

'08' = Browser Termination (if class "c" is supported) 

'09' = Data available (if class "e" is supported) 

'OA' = Channel status (if class "e" is supported) 



12.26 Cause 



Byte(s) 


Description 


Length 


1 


Cause tag 


1 


2 


Length (X) of bytes following. X=0, or 2 < X < 30. 


1 


3 to X+2 


Cause 


X 



The Cause data object is coded as for the Cause call control information element in TS 04.08 [8], starting at octet 3 (the 
lEI and Length information are removed, as this information is duplicated by the data object tag and length). 

Radio Link Timeout is indicated by the Cause data object having a value part of zero length (only the Tag and Length 
components are sent). 

12.27 Location status 



Byte(s) 


Description 


Length 


1 


Location status tag 


1 


2 


Length (X) of bytes following 


1 


3 


Location status 


1 



Location status 

Contents: this data object indicates the current service state of the MS. 

"Normal service" shall indicate that the MS is in a state where all requests for services are treated normally. 

"Limited service" shall indicate that the MS is in a state where only emergency call services are offered. 

"No service" shall indicate that the MS is in a state where no services are offered. 

Coding: Each byte in the event list shall be coded with one of the values below: 
'00' = Normal service 
'01' = Limited service 
'02' = No service 
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12.28 Transaction identifier 



Byte(s) 


Description 


Length 


1 


Transaction identifier tag 


1 


2 


Length (X) of bytes following 


1 


3 to X+2 


Transaction identifier list 


X 



Transaction identifier list 

Contents: A list of transaction identifiers, of variable length. Each byte in the list defines a transaction identifier. 
Each transaction identifier shall not appear more than once within the list. 

Coding: Each byte in the transaction identifier list shall be coded as defined below: 
bits 1 to 4 = RFU 
bits 5 to 7 = TI value 
bit 8 = TI flag 

TI value and TI flag are coded as defined in TS 24.007 [23]. 



12.29 BCCH channel list 



Byte(s) 


Description 


Length 


1 


BCCH channel list tag 


1 


2 


Length (X) of bytes following 


1 


3 to X+2 


BCCH channel list 


X 



BCCH channel list 

Contents: the list of absolute RF channels for BCCH carriers, as known by the ME from the SYSTEM 

INFORMATION messages. The BCCH channel list is composed of one to three BCCH channel sub lists, 
each sub list is derived from the set of frequencies defined by reference neighbour cells description 
information element or elements. In the latter case the set is the union of the different subsets defined by the 
neighbour cells description information elements (see TS 04.08 [8]). The length of the BCCH channel list 
field depends on the length of the received BCCH channel list derived from the different SYSTEM 
INFORMATION messages to be considered. 

Coding: Each ARFCN is represented by 10 bits. Spare bit(s) are to be filled with 0. 



Bytel 
Byte 2 
Bytes 



Bits Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 


ARFCN#1 (high part) 


ARFCN#1 (low part) ARFCN#2 (high part) 


ARFCN#2 (low part) ARFCN#3 (high part) 



Byte X-1 
ByteX 



ARFCN#m-1 (low part) 



ARFCN#m (high part) 



ARFCN#m (low part) 



Spare bit 

(0) 



Spare bit 
(0) 



SIM applications should take into account that early implementations of SIM application toolkit may have 
coded this field differently, because of an inconsistancy between the content and the coding of this element in 
previous versions of 11.14. The SIM is able to identify MEs that are using the coding described above by 
evaluating the indication "BCCH Channel List coding" in the TERMINAL PROFILE command. 
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12.30 Call control requested action 



Byte(s) 


Description 


Length 


1 


Call control requested action tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3to 
(Y-1)+X+2 


Call control requested action 


X 



Call control requested action 

Contents: The action given in response to the ENVELOPE (CALL CONTROL). It may contain, in the same 
order as given by the SIM, the address or SS string, the capability configuration parameters, the called party 
sub-address and the alpha identifier. 

Coding: as described in subclause 9.L6, starting with the first optional element given in the response data to 
the ENVELOPE (CALL CONTROL). 

12.31 Icon Identifier 



Byte(s) 


Description 


Length 


1 


Icon identifier tag 


1 


2 


Length = '02' 


1 


3 


Icon qualifier 


1 


4 


Icon identifier 


1 



Icon qualifier: 

Contents: The icon qualifier indicates to the ME how the icon is to be used. 

Coding: 

bit 1: = icon is self-explanatory, i.e. if displayed, it replaces the alpha identifier or text string 

1 = icon is not self-explanatory, i.e. if displayed, it shall be displayed together with the alpha 
identifier or text string 

bits 2-8 = RFU. 

Icon identifier: 

Contents: The icon identifier addresses a record in EFimg as defined in TS U . 1 1 [20] . 

Coding: Binary. 



12.32 Item Icon Identifier list 



Byte(s) 


Description 


Length 


1 


Items Icon identifier tag 


1 


2 


Length (X) of bytes following 


1 


3 


Icon list qualifier 


1 


4 to 4+X-2 


Icon identifier list 


X-1 



Icon list qualifier: 

Contents: The icon list qualifier indicates to the ME how the icons are to be used. 

Coding: 

bit 1: = icon is self-explanatory, i.e. if displayed, it replaces the item text 

1 = icon is not self-explanatory, i.e. if displayed, it shall be displayed together with the item text 

bits 2-8 = RFU. 

All icons in the list shall be treated in the same manner by the ME, i.e. either none of the icons in this list are 
displayed, or for each item its related icon is displayed. 

Icon identifier list: 
Contents : 

Each item of a list of items has an icon identifier coded on one byte. The length of the 
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Items icon identifier list shall be the number of items of the list of items (X-1 shall be the number of items 
in the list). The order of each item icon identifier, shall reflect the order of the items in the list of items. 
Each icon identifier addresses a record in EFjmg as defined in TS 11.11 [20]. 

Coding : Binary. 

Example : 

For the following list of items : - item #1; 

- item #2; 
-item #3; 

- item #n, 

the Items icon identifier list shall be as follows : 



Tag 


Length 


Icon Hst 
qualifier 


icon 
identifiers 1 


icon 
identifier#2 


icon 
identifier#3 




icon 
identifier#n 



12.33 Card reader status 

This subclause applies only if class "a" is supported. 



Byte(s) 


Description 


Length 


1 


Card reader status tag 


1 


2 


Length 


1 


3 


Card reader status 


1 



Card reader status: 
Contents : 

This contains the identity of the card reader, and flags to indicate the status of the reader with respect to: 

whether the card reader is removable or permanently connected; 

whether the card reader is present (this can only be false if the card reader is removable); 

whether the card reader present accepts ID-1 size cards (this can only be true if the card reader is present); 

whether there is a card present in the card reader (this can only be true if the card reader is present); 

whether power is being applied to the card (this can only be true if a card is present). 

Coding : 

The value of this byte indicates the identity and status of a card reader. 
: identity of card reader x. 
: Card reader is not removable 
: Card reader is removable 
: Card reader is not present 
: Card reader is present 
: Card reader present is not ID-1 size 
: Card reader present is ID-1 size 



bits 1-3 




bit 4 







1 


bits 







1 


bit 6 







1 



bit? 



bits 



= No card present 

1 = Card is present in reader 

= No card powered 

1 = Card in reader is powered 



12.34 CardATR 

This subclause applies only if class "a" is supported. 
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Byte(s) 


Description 


Length 


1 


Card ATR tag 


1 


2 


Length (X) of bytes following 


1 


3 to (X+2) 


ATR 


X 



ATR: 

Contents : 

This is the Answer To Reset returned by the card. 

Coding : 

The coding of the Answer To Reset is defined in ISO/IEC 7816-3 [16]. 



12.35 C-APDU 

This subclause applies only if class "a" is supported. 



Byte(s) 


Description 


Length 


1 


C-APDU tag 


1 


2to(Y+1) 


Length (X) of bytes following (Y = 1 or 2) 


Y 


Y+2 


Command class CLA 


1 


Y+3 


Command instruction code INS 


1 


Y+4 


P1 parameter 


1 


Y+5 


P2 parameter 


1 


Y+6 


Lc (optional) 


Oor1 


(Y+7) to 
(Y+X) 


Data (optional) 


Lc 


Y+X+1 


Le (optional) 


Oor1 



This object contains the command APDU for Card x in the format defined in ISO/lEC 7816-4 [25]. Command class 
CLA, instruction code INS, PI and P2 parameters, Lc, Data and Le are coded as defined in ISO/lEC 7816-4 [25]. 
Extended lengths are not supported. 

Note: The maximum size of the value part of this Simple TLV (value of X) is limited to 241 bytes, so the maximum 
length for the Data (value of Lc) in a Case 3 type of APDU is 236 bytes. 

12.36 R-APDU 

This subclause applies only if class "a" is supported. 



Byte(s) 


Description 


Length 


1 


R-APDU tag 


1 


2 to 

Y+1 


Length (X) of bytes following (Y = 1 or 2) 


Y 


Y+2 to Y+X-1 


R-APDU data (optional) 


X-2 


Y+X 


Status word SW1 


1 


Y+X+1 


Status word SW2 


1 



This object contains the response APDU from Card x in the format defined in ISO/lEC 7816-4 [25]. The R-APDU data 
and status words SWl and SW2 are coded as defined in ISO/lEC 7816-4 [25]. It is possible for no R-APDU data to be 
present; this is indicated by the length of the data object. 

Note: The maximum size of the value part of this Simple TLV (value of X) is limited to 239 bytes, so the maximum 
length of the R-APDU data is 237 bytes. 
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12.37 Timer identifier 



Byte(s) 


Description 


Length 


1 


Timer identifier tag 


1 


2 


Length='01' 


1 


3 


Timer identifier 


1 



Timer identifier: 

Contents: identifier of a timer 

Coding: 

'01 'Timer 1 
'02 'Timer 2 
'03 'Timer 3 
'04' Timer 4 
'05'Timer 5 
'06 'Timer 6 
'07 'Timer 7 
'08'Timer 8 

All other values are reserved 



12.38 Timer value 



Byte(s) 


Description 


Length 


1 


Timer value tag 


1 


2 


Length='03' 


1 


3-5 


Timer value 


3 



Timer value: 

Contents: value of a timer, expressed using the format hour, minute, second. 

Coding: 

- byte 3: hour; this byte is coded exactly in the same way as the hour field of the TP-Service-Centre-Time- 
StampinTS23.040[6]. 

- byte 4: minute; this byte is coded exactly in the same way as the minute field of the TP-Service-Centre- 
Time-Stamp in TS 23.040 [6]. 

- byte 5: second; this byte is coded exactly in the same way as the second field of the TP-Service-Centre- 
Time-Stamp in TS 23.040 [6]. 

1 2.39 Date-Time and Time zone 



Byte(s) 


Description 


Length 


1 


Date-Time and Time zone tag 


1 


2 


Length = '07' 


1 


3 to 9 


Date-Time and Time zone 


7 



The Date-Time and Time zone is coded as for the Time Zone and Time information element in TS 04.08 [8], starting at 
octet 2 (i.e. 1 byte for year, month, day, hour, minute, second and time zone). Each byte is encoded in exactly the same 
way as the corresponding field of the TP-Service-Centre-Time-Stamp in TS 23.040 [6]. For the time zone field, 'FF' 
indicates an unknown value. 



12.40 AT Command 



This subclause applies only if class "b" is supported. 
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Byte(s) 


Description 


Length 


1 


AT Command tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3to 
(Y-1)+3+X-1 


AT Command string 


X 



Contents : The AT Command string is structured exactly as the AT Command line as defined in GSM 27.007 
[27], which may contain single or concatenated AT commands. 



12.41 AT Response 

This subclause applies only if class "b" is supported. 



Byte(s) 


Description 


Length 


1 


AT Response tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3to 
(Y-1)+3+X-1 


AT Response string 


X 



Contents: The AT Response string is structured exactly as the response to a command line as defined in 
GSM 27.007 [27], which may contain single or concatenated responses appropriate to the issued AT 
command. 

If the AT Response string is longer than the maximum length capable of being transmitted to the SIM then 
the AT Response string shall be truncated to this length by the ME. 



1 2.42 BC Repeat indicator 



Byte(s) 


Description 


Length 


1 


BC repeat indicator tag 


1 


2 


Length 


1 


3 


BC repeat indicator values 


1 



Contents : The BC repeat indicator is structured exactly as defined in TS 04.08 [08], which may be alternate 
mode or sequential mode. 

Coding: '01' = Alternate mode; 
'03' = Sequential mode 



12.43 Immediate response 

This TLV object is used in the sustained DISPLAY TEXT command. 



Byte(s) 


Description 


Length 


1 


Immediate response tag 


1 


2 


Length='00' 


1 
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12.44 DTMF String 



Byte(s) 


Description 


Length 


1 


DTMF String tag 


1 


2to(Y-1)+2 


Length (X) 


Y 


(Y-1)+3to 
(Y-1)+3+X-1 


DTMF string 


X 



Contents : 

The DTMF string which can be single or muhiple characters is coded in BCD, in the same way as the 
Dialling number string defined for EFadn in TS 11.11 [20]. It may include extended BCD coding. There is 
no need for a DTMF control digit separator at the beginning of the string, but if present it shall be interpreted 
as PAUSE. 



12.45 Language 



Byte(s) 


Description 


Length 


1 


Language tag 


1 


2 


Length = '02' 


1 


3-4 


Language 


2 



Coding: 

each language code is a pair of alpha-numeric characters, defined in ISO 639 [29]. Each alpha-numeric 
character shall be coded on one byte using the SMS default 7-bit coded alphabet as defined in TS 23.038 [5] 
with bit 8 set to 0. 



12.46 Timing Advance 



Byte(s) 


Description 


Length 


1 


Timing Advance tag 


1 


2 


Length = '02' 


1 


3 


ME Status 


1 


4 


Timing Advance 


1 



Coding of ME status: 

'00' = ME is in the idle state 
'01' = ME is not in idle state 
'02' to'FF'= reserved values 

The Timing Advance is coded as for the Timing Advance information element in TS 04.08 [8], starting at octet 2 (the 
lEI is removed, as this information is duplicated by the data object tag). 



12.47 Browser Identity 



Byte(s) 


Description 


Length 


1 


Browser identity tag 


1 


2 


Length (1) 


1 


3 


Browser Identity 


1 



Coding : 

00 = Default Browser shall be used. 
Other values are RFU. 
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12.48 URL 



Byte(s) 


Description 


Length 


1 


URL tag 


1 


2to(Y+1) 


Length (X) 


Y 


(Y+2) to 
(Y+1 + X) 


URL 


X 



A null URL shall be coded with Length = '00', and no Value part. In that case, the ME shall use the default URL. 

Coding : 

The data used for the URL shall be coded as defined in [32] on using the "SMS 7bits default alphabet" with bit i 
set to ; 

12.49 Bearer 



Byte(s) 


Description 


Length 


1 


Bearer tag 


1 


2to{Y+ 1) 


Length (X) 


Y 


(Y+2) to (Y + 
X+1) 


List of bearers in order of priority requested 


X 



The ME shall use this list to choose which bearers are allowed in order of priority. 
Coding of the bearers : 

'00' = SMS ; 
'01' = CSD; 
'02' = USSD ; 
'03' = GPRS ; 

'04' to 'FF' = RFU. 

12.50 Provisioning File Reference 



Byte(s) 


Description 


Length 


1 


Provisioning file reference tag 


1 


2to(Y+ 1) 


Length (X) 


Y 


(Y+2) to (Y + 
X+1) 


Path to the provisioning file 


X 



Note : the path is the concatenation of file identifiers starting from the Master File, e.g. : 
3F007F206FXY.... 

The file shall contain a single unambiguous set of parameters required to make the connection. The 
content of the file shall be consistent with the format defined for provisioning information for the 
requested type of browser. 

12.51 Browser Termination Cause 



Byte(s) 


Description 


Length 


1 


Browser Termination Cause tag 


1 


2 


Length (1) 


1 


3 


Browser Termination Cause 


1 
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Coding: 



00 = User Termination. 

01 = Error Termination. 



12.52 Bearer description 

This subclause applies only if class "e" is supported. 



Byte(s) 


Description 


Length 


1 


Bearer description tag 


1 


2 


Length {X+1) 


1 


3 


Bearer type 


1 


4 to (3+X) 


Bearer parameters 


X 



Bearer Type coding 

- '01': CSD 

- '02': GPRS 

'03': default bearer for requested transport layer. 

all other values are reserved for future use 

1 2.52. 1 Bearer parameters for CSD 

Contents: parameters specific to the bearer. 

The default values of the subparameters are manufacturer specific since they depend on the purpose of the device 
and data services provided by it. Not all combinations and values of these subparameters are supported by GSM 
(refer TS 22.002 [30]). 

X (length of parameters) = 3. 

Coding: 

The following values are as defined in the GSM 27.007 [27] for the select service bearer type "+CBST" extended 
command. They are coded in hexadecimal. 

byte 4 - Data rate: same as the "speed" subparameter defined in TS 27.007 [27]. 

byte 5 - bearer service: same as the "name" subparameter defined in TS 27.007 [27]. 

byte 6 - connection element: same as the "ce" subparameter defined in TS 27.007 [27]. 

1 2.52.2 Bearer parameters for GPRS / packet service 

Contents : parameters describing the Quality of Service (QoS) and the type of PDP. This is an element of the PDP 
context. 

The default values of the subparameters are manufacturer specific since they depend on the purpose of the device 
and data services provided by it. Not all combinations and values of these subparameters are supported by GSM 
(refer TS 22.002 [30]). 

X (length of parameters) = 6. 

Coding : The following values are as defined in TS 27.007 [27], for the quality of Service profile requested 
"+CGQREQ" extended command. They are coded in hexadecimal. 

Coding of Byte 4 - Precedence class: same as the "precedence" subparameter, defined in TS 27.007 [27]. 

Coding of Byte 5 - Delay class: same as the "delay" subparameter, defined in TS 27.007 [27]. 

Coding of Byte 6 - Reliability class: same as the "reliability" subparameter, defined in TS 27.007 [27]. 
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Coding of Byte 7 - Peak throughput class: same as the "peak" subparameter, defined in TS 27.007 [27]. 
Coding of Byte 8 - Mean throughput class: same as the "mean" subparameter, defined in TS 27.007 [27]. 
Coding of Byte 9 - Packet data protocol type: 

- '02' = IP (Internet Protocol, IETF STD 5); 

- all other values are reserved. 

12.52.3 Default bearer 

Contents: none 

X (length of parameters) = 0. 

The ME is responsible for providing the parameters necessary to establish the connection (e.g. APN for GPRS, Address 
forCSD, ...). 

12.53 Channel data 

This subclause applies only if class "e" is supported. 



Byte(s) 


Description 


Length 


1 


Channel data tag 


1 


2 to Y+1 


Length (X) 


Y 


(Y+2) to 
(Y+X+1) 


Channel data string 


X 



Contents: 

The Channel data object contains application data read from or written to a specific channel buffer in the ME. 

Coding: 

The Channel data string shall be considered by the ME as binary coded on 8 bits. 



12.54 Channel data length 

This subclause applies only if class "e" is supported. 



Byte(s) 


Description 


Length 


1 


Channel data length tag 


1 


2 


Length (1) 


1 


3 


Channel data length 


1 



The Channel data length codes : 

either the number of bytes that are available in a channel buffer (Tx or Rx buffers negotiated during OPEN 
CHANNEL) using TERMINAL RESPONSE. Since the Tx or Rx buffer size can be larger than 255 bytes, 
'FF' means "more than 255 bytes are available". 

or the number of bytes that are requested in a RECEIVE DATA command. 

12.55 Buffer size 

This subclause applies only if class "e" is supported. 
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Byte(s) 


Description 


Length 


1 


Buffer size tag 


1 


2 


Length (2) 


1 


3 to 4 


Buffer size 


2 



The Buffer size codes the number of bytes requested by the SIM in an OPEN CHANNEL command or what the 
ME can offer the SIM (placed in TERMINAL RESPONSE). 

12.56 Channel status 

This subclause applies only if class "e" is supported. 



Byte(s) 


Description 


Length 


1 


Channel status tag 


1 


2 


Length (2) 


1 


3 to 4 


Channel status 


2 



Contents : 

The Channel status is a string of binary coded characters. 

Coding of byte 3: 

bit 1 to 3: Channel identifier : 1..7 

Channel identifier means "No channel available" 
bit 4 to 7: RFU 

bit 8: = Link not established or PDP context not activated 
1 = Link established or PDP context activated 

Coding of byte 4: 

'00' = No further info can be given 

- '01' = Not used 

- '02' = Not used 

- '03' = Not used 

- '04' = Not used 
'05' = Link dropped 

all other values are reserved for future use 



12.57 Card reader identifier 

This subclause applies only if class "a" is supported. 



Byte(s) 


Description 


Length 


1 


Card reader identifier tag 


1 


2 


Length (X) 


1 


3 to (X+2) 


Identifier of card reader 


X 



Coding : 

The identifier of card reader is coded in hexadecimal. 
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12.58 other Address 



Byte(s) 


Description 


Length 


1 


Other address tag 


1 


2 


Length (X) 


1 


3 


Type of address 


1 


4 to (X+2) 


Address 


X-1 



A null Local address shall be coded with Length = '00', and no Value part. In that case, the ME shall request a dynamic 
address. 

Coding of Type of address: according to packet data protocol address in TS 04.08 [8]. 
'21' = IPv4 address 
'57' = IPv6 address 
'others' = reserved 

Coding of address: according to packet data protocol address in TS 04.08 [8]. 

If type of address indicates IPv4, the Address information in octet 4 to octet 7 contains the IPv4 address. Bit 
8 of octet 4 represents the most significant bit of the IP address and bit 1 of octet 7 the least significant bit . 

If type of address indicates IPv6, the Address information in octet 4 to octet 19 contains the IPv6 address. Bit 
8 of octet 4 represents the most significant bit of the IP address and bit 1 of octet 19 the least significant bit. 



12.59 SIM/ME interface transport level 

This subclause applies only if class "e" is supported. 



Byte(s) 


Description 


Length 


1 


SIM/ME interface transport level tag 


1 


2 


Length {X+1) 


1 


3 


Transport protocol type 


1 


4 to 5 


Port number 


2 



Transport protocol type coding: 

- '01' : UDP (as defined in RFC 768 [33]) 

- '02' : TCP (as defined in RFC 793 [34]) 
all other value are reserved 

Port number coding: integer 



12.60 Void 



1 2.61 Network Access Name 



Byte(s) 


Description 


Length 


1 


Network Access Name tag 


1 


2 


Length (X) 


1 


3 to 3+X-1 


Network Access Name 


X 



Content: The Network Access Name is used to identify the Gateway entity, which provides interworking with 
an external packet data network. For GPRS, the Network Access Name is an APN. 

Coding: As defined in TS 23.003 [36]. 
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13 Tag values 

This clause specifies the tag values used to identify the BER-TLV and SIMPLE-TLV data objects used in this 
specification. 

13.1 BER-TLV tags in ME to SIM direction 



Description 


Length of tag 


Value 


SMS-PP download tag 




'D1' 


Cell Broadcast download tag 




'D2' 


Menu Selection tag 




'D3' 


Call control tag 




'D4' 


MO Short message control tag (if (MOSMcontrol is 
supported) 




'D5' 


Event download tag 




'D6' 


Timer expiration 




'D7' 


Reserved for TIA/EIA-1 36 




'DF 



1 3.2 BER-TLV tags in SIM TO ME direction 



Description 


Length of tag 


Value 


Proactive SIM command tag 


1 


'DO' 



1 3.3 SIMPLE-TLV tags in both directions 



CR 



Tag value 



CR: Comprehension required for this object. 

Unless otherwise stated, for SIMPLE-TLV data objects it is the responsibility of the SIM application and the ME to 
decide the value of the CR flag for each data object in a given command. 

Handling of the CR flag at the receiving entity is described in subclause 6.10. 



CR 


Value 


Comprehension required 


1 


Comprehension not required 
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Description 


Length of tag 


Tag value, bits 1-7 
(Range: -or -'7E') 


Tag 
(CR and Tag value) 


Command details tag 




'01' 


'01 'or '81' 


Device identity tag 




'02' 


'02' or '82' 


Result tag 




'03' 


'03' or '83' 


Duration tag 




'04' 


'04' or '84' 


Alpha identifier tag 




'05' 


'05' or '85' 


Address tag 




'06' 


'06' or '86' 


Capability configuration parameters tag 




'07' 


'07' or '87' 


Subaddress tag 




'08' 


'08' or '88' 


SS string tag 




'09' 


'09' or '89' 


USSD string tag 




'DA' 


'OA' or '8A' 


SMS TPDU tag 




'OB' 


'OB' or '8B' 


Cell Broadcast page tag 




'OC 


'OC or '8C' 


Text string tag 




'OD' 


'OD' or '8D' 


Tone tag 




'OE' 


'OE' or '8E' 


Item tag 




'OF' 


'OF' or '8F' 


Item identifier tag 




'10' 


'10' or '90' 


Response length tag 




'11' 


'11'or'91' 


File List tag 




'12' 


'12' or '92' 


Location Information tag 




'13' 


'13' or '93' 


IMEI tag 




'14' 


'14' or '94' 


Help request tag 




'15' 


'15' or '95' 


Network Measurement Results tag 




'16' 


'16' or '96' 


Default Text tag 




'17' 


'17 or '97' 


Items Next Action Indicator tag 




'18' 


'18' only 


Event list tag 




'19' 


'19' or '99' 


Cause tag 




'1A' 


'1A'or'9A' 


Location status tag 




'IB' 


'1B'or'9B' 


Transaction identifier tag 




'IC 


'1C'or'9C' 


BCCH channel list tag 




'1D' 


'1D'or'9D' 


Icon identifier tag 




'IE' 


'1E'or'9E' 


Item Icon identifier list tag 




'IF' 


'1F'or'9F' 


Card reader status tag class "a" 




'20' 


'20' or 'AO' 


Card ATR tag class "a" 




'21' 


'21'or'A1' 


C-APDU tag class "a" 




'22' 


'22' or 'A2' 


R-APDU tag class "a" 




'23' 


'23' or 'A3' 


Timer identifier tag 




'24' 


'24' or 'A4' 


Timer value tag 




'25' 


'25' or 'A5' 


Date-Time and Time zone tag 




'26' 


'26' or 'A6' 


Call control requested action tag 




'27' 


'27' or 'A7' 


AT Command tag class "b" 




'28' 


'28' or 'A8' 


AT Response tag class "b" 




'29' 


'29' or 'A9' 


BC Repeat Indicator tag 




'2A' 


'2 A' or 'AA' 


Immediate response tag 




'2B' 


'2B' or 'AB' 


DTMF string tag 




'2C' 


'2C' or 'AC 


Language tag 




'2D' 


'2D' or 'AD' 


Timing Advance tag 




'2E' 


'2E' or 'AE' 


The '2F' tag is reserved for use in 3GPP TS 31 .1 1 1 




'2F' 




Browser Identity tag class "c" 




'30' 


'30' or 'BO' 


URL tag class "c" or "e" 




'31' 


'31'or'B1' 


Bearer tag class "c" 




'32' 


'32' or 'B2' 


Provisioning Reference File tag class "c" 




'33' 


'33' or 'B3' 


Browser Termination Cause tag class "c" 




'34' 


'34' or 'B4' 


Bearer description tag class "e" 




'35' 


'35' or 'B5' 


Channel data tag class "e" 




'36' 


'36' or 'B6' 


Channel data length tag class "e" 




'37' 


'37' or 'B7' 


Channel status tag class "e" 




'38' 


'38' or 'B8' 


Buffer size tag class "e" 




'39' 


'39' or 'B9' 


Cont 


nued 
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Description 


Length of tag 


Tag value, bits 1-7 
(Range: -or -TE') 


Tag 
(CR and Tag value) 


Card reader identifier tag class "a" 




'3A' 


'3A' or 'BA' 


not used 




'3B' 


- 


SIM/IVIE interface transport level tag class "e" 




'3C' 


'3C' or 'BC 


not used 




'3D' 


- 


Other address (data destination address) tag class "e" 




'3E' 


'3E' or 'BE' 


Network Access Name tag 




'47' 


'47' or 'C7' 


Reserved for TIA/EIA-1 36 




'60' 


'60' or 'EO' 


Reserved for TIA/EIA-1 36 




'61' 


'61 'or 'El' 



13.4 Type of Command and Next Action Indicator 

The table below shows the values which shall be used for Type of Command coding (see subclause 12.6) and Next 
Action Indicator coding (see subclause 12.24). 



Value 


Name 


used for Type of 
Command coding 


used for Next Action 
Indicator coding 


'00' 




- 


- 


'01' 


REFRESH 


X 




'02' 


MORE TIME 


X 




'03' 


POLL INTERVAL 


X 




'04' 


POLLING OFF 


X 




'05' 


SET UP EVENT LIST 


X 




'10' 


SET UP CALL 


X 


X 


'11' 


SEND SS 


X 


X 


'12' 


SEND USSD 


X 


X 


'13' 


SEND SHORT MESSAGE 


X 


X 


'14' 


SEND DTMF 


X 




'15' 


LAUNCH BROWSER class "c" 


X 




'20' 


PLAY TONE 


X 


X 


'21' 


DISPLAY TEXT 


X 


X 


'22' 


GETINKEY 


X 


X 


'23' 


GET INPUT 


X 


X 


'24' 


SELECT ITEM 


X 


X 


'25' 


SET UP MENU 


X 


X 


'26' 


PROVIDE LOCAL INFORMATION 


X 




'27' 


TIMER MANAGEMENT 


X 




'28' 


SET UP IDLE MODEL TEXT 


X 


X 


'30' 


PERFORM CARD APDU class "a" 


X 


X 


'31' 


POWER ON CARD class "a" 


X 


X 


'32' 


POWER OFF CARD class "a" 


X 


X 


'33' 


GET READER STATUS class "a" 


X 


X 


'34' 


RUN AT COMMAND class "b" 


X 




'35' 


LANGUAGE NOTIFICATION 


X 




'40' 


OPEN CHANNEL class "e" 


X 


X 


'41' 


CLOSE CHANNEL class "e" 


X 


X 


'42' 


RECEIVE DATA class "e" 


X 


X 


'43' 


SEND DATA class "e" 


X 


X 


'44' 


GET CHANNEL STATUS class "e" 


X 


X 


'60' 


Reserved for TIA/EIA-1 36 


X 


X 


'81' 


End of the proactive session 


not applicable 


X 
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14 Allowed Type of command and Device identity 
combinations 

Only certain types of commands can be issued with certain device identities. These are defined below: 



Command description 


Source 


Destination 


CALL CONTROL 


ME 


SIM 


CELL BROADCAST DOWNLOAD 


Network 


SIM 


COMMAND RESULT 


ME 


SIM 


CLOSE CHANNEL class "e" 


SIM 


Channel x 


DISPLAY TEXT 


SIM 


Display 


EVENT DOWNLOAD 






-MTcall 


Network 


SIM 


- Call connected at near end (MT call) 


ME 


SIM 


- Call connected at far end (MO call) 


Network 


SIM 


- Call disconnected at near end 


ME 


SIM 


- Call disconnected at far end 


Network 


SIM 


- Location status 


ME 


SIM 


- User activity 


ME 


SIM 


- Idle screen available 


Display 


SIM 


- Card reader status class "a" 


ME 


SIM 


- language selection 


ME 


SIM 


- Data available class "e" 


ME 


SIM 


- Channel status class "e" 


ME 


SIM 


GET CHANNEL STATUS class "e" 


SIM 


ME 


GETINKEY 


SIM 


ME 


GET INPUT 


SIM 


ME 


GET READER STATUS class "a" 


SIM 




- If card reader status requested 


SIM 


ME 


- If card reader identifier requested 


SIM 


card reader x 


LANGUAGE NOTIFICATION 


SIM 


ME 


LAUNCH BROWSER class "c" 


SIM 


ME 


MENU SELECTION 


Keypad 


SIM 


MO SHORT MESSAGE CONTROL 


ME 


SIM 


MORE TIME 


SIM 


ME 


OPEN CHANNEL class "e" 


SIM 


ME 


PERFORM CARD APDU class "a" 


SIM 


Card reader x 


PLAY TONE 


SIM 


Earpiece (see note) 


POLLING OFF 


SIM 


ME 


POLL INTERVAL 


SIM 


ME 


POWER ON CARD class "a" 


SIM 


Card reader x 


POWER OFF CARD class "a" 


SIM 


Card reader x 


PROFILE DOWNLOAD 


ME 


SIM 


PROVIDE LOCAL INFORMATION 


SIM 


ME 


RECEIVE DATA class "e" 


SIM 


Channel x 


REFRESH 


SIM 


ME 


RUN AT COMMAND class "b" 


SIM 


ME 


SELECT ITEM 


SIM 


ME 


SEND DATA class "e" 


SIM 


Channel x 


SEND DTMF 


SIM 


Network 


SEND SHORT MESSAGE 


SIM 


Network 


SENDSS 


SIM 


Network 


SEND USSD 


SIM 


Network 


SET UP CALL 


SIM 


Network 


SET UP EVENT LIST 


SIM 


ME 


SET UP IDLE MODE TEXT 


SIM 


ME 


SET UP MENU 


SIM 


ME 


SMS-PP DOWNLOAD 


Network 


SIM 


TIMER MANAGEMENT 


SIM 


ME 


TIMER EXPIRATION 


ME 


SIM 


NOTE: The ME may route the tone to other loudspeakers (external ringer, car kit) if more appropriate. 
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15 Security requirements 



TS 03.48 [24] specifies standardised methods of securing the content of application messages to and from the SIM 
AppHcation Toolkit. If it is necessary to secure application messaging to Toolkit applications, then TS 03.48 [24] may 
be used. 
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Annex A (normative): 

Support of SIM Application Toolkit by Mobile Equipment 

Support of SIM Application Toolkit is optional for Mobile Equipment. However, if an ME states conformancy with a 
specific GSM release, it is mandatory for the ME to support all functions of that release. 

The support of letter classes, which specify mainly ME hardware dependent features, is optional for the ME and may 
supplement the SIM Application Toolkit functionality described in this document. If an ME states conformancy to a 
letter class, it is mandatory to support all functions within the respective letter class. 

The table below indicates the commands of the optional letter classes: 



Letter classes 


Command/function description 


a 


Proactive command: GET READER STATUS 
Proactive command: PERFORIVI CARD APDU 
Proactive command: POWER ON CARD 
Proactive command: POWER OFF CARD 
Event download: Card reader status 


b 


Proactive command: RUN AT COMMAND 


c 


Proactive command: LAUNCH BROWSER 
Event download: Browser termination 


d 


Soft key support 


e 


Proactive command: OPEN CHANNEL 
Proactive command: CLOSE CHANNEL 
Proactive command: RECEIVE DATA 
Proactive command: SEND DATA 
Proactive command: GET CHANNEL STATUS 
Event download: Data available 
Event download: Channel status 
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Annex B (informative): 

Example command sequences for proactive SIIVI 

This subclause shows example APDU sequences for proactive SIM commands, and is for information only. 
Case 1: Proactive SIM request following a normal command from the ME 

ME SIM 

Normal command 

Normal Data, if any '91' Igth 



[Possible "normal GSM operation" command/response pairs] 

I FETCH I 



Proactive SIM command '90' '00' 



[Possible "normal GSM operation" command/response pairs] 
[ME performs command] 

I TERMINAL RESPONSE (OK) I 



[Possible "normal GSM operation" command/response pairs] 



[Possible "normal GSM operation" command/response pairs] 
[ME performs command] 

I TERMINAL RESPONSE (OK) I 



Case 3: STATUS command from ME, not followed by any proactive SIM request 



Case 4: Unsuccessful proactive SIM request, followed by SIM asking the ME to retry 



90' '00' 



Case 2: Proactive SIM request following a (polling) STATUS command from the ME 

ME SIM 

I STATUS command I 

I Normal Data on DF I '91' I Igth 



FETCH 

Proactive SIM command '90' '00' 



30' '00' 



IE SIM 

STATUS command I 

I Normal Data on DF I '90' I '00' 



4E SIM 

Normal command 

Normal Data, if any ' 91 ' Igth 
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[Possible "normal GSM operation" command/response pairs] 

I FETCH I 

Proactive SIM command '90' '00' 



[Possible "normal GSM operation" command/response pairs] 
[ME performs command] 

I TERMINAL RESPONSE (temporary problem) I 

I '91' I Igth 



[Possible "normal GSM operation" command/response pairs] 

I FETCH I 

Repeat of proactive SIM command '90' '00' 



[Possible "normal GSM operation" command/response pairs] 
[ME performs command] 



TERMINAL RESPONSE (OK) 



[Possible "normal GSM operation" command/response pairs] 



[Possible "normal GSM operation" command/response pairs] 
[ME performs command] 

I TERMINAL RESPONSE (temporary problem) I 



30' '00' 



Case 5: Unsuccessful proactive SIM request, and the SIM does not ask for the ME to retry 

ME SIM 

Normal command 

Normal Data, If any ' 91 ' Igth 



FETCH 

Proactive SIM command '90' 'OC 



'90' '00' 
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Annex C (informative): 

Example of DISPLAY TEXT Proactive SIM Command 

Example of DISPLAY TEXT Proactive SIM Command 
(BER-TLV Data Object) 



Byte# 


Value (Hex) 


Description 


1 


DO 


Proactive SIM command tag 


2 


OF 


length 


3 


81 


command details tag 


4 


03 


length 


5 


01 


command number 


6-7 


21 00 


Display text (normal priority, clear message after a 
delay) 


8 


82 


Device identities tag 


9 


02 


length 


10 


81 


source: SIM 


11 


02 


destination: Display 


12 


8D 


Text string tag 


13 


04 


length 


14 


04 


Data coding scheme ('04'=8-bit default SMS) 


15-17 


53,41,54 


text string ("SAT") 
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Annex D (normative): 

Structure of SIM Application Toolkit communications 



BER-TLV data 
object 

SMPLE-TLV 

data object 

Elements within 
the data object 



l..n SIMPLE-TLV objects 



l..m elements 



T 


L 


V 



SIM Application Toolkit commands and responses are sent across the interface as BER-TLV data objects. Each APDU 
shall only contain one BER-TLV object. 



The tag is a constant value, length one byte, indicating it is a SIM Application Toolkit command. 

The length is coded onto l,or 2 bytes according to ISO/IEC 7816-6 [17]. The following table details this coding: 



Length 


Bytel 


Byte 2 


0-127 


length ('00' to '7F') 


not present 


128-255 


'81' 


length ('80' to 'FF') 



Any length within the APDU limits (up to 255 bytes) can thus be encoded on two bytes. This coding is chosen to 
remain compatible with ISO/IEC 7816-6 [17]. 

Any values for byte 1 or byte 2 that are not shown above shall be treated as an error and the whole message shall be 
rejected. 

The value part of the BER-TLV data object consists of SIMPLE-TLV data objects, as shown in the description of the 
SIMPLE-TLV data objects on individual commands. It is mandatory for SIMPLE-TLV data objects to be provided in 
the order given in the description of each command. New SIMPLE-TLV data objects can be added to the end of a 
command. 

The M/O columns specify whether it is mandatory or optional for the sender to send that particular SIMPLE-TLV data 
object for compliance with the current version of this TS. The Min (Minimum Set) column describes whether it is 
necessary for the receiver to have received that particular SIMPLE-TLV data object to be able to attempt at least the 
most basic form of this command. The procedure for dealing with incomplete messages is described in subclause 6.10. 

'GO' and 'FF' are never used as tag values for BER-TLVs. This is in accordance with ISO/IEC 7816-6 [17]. Padding 
characters are not allowed. 

See ISO/IEC 7816-6 [17] for more information on data objects. 
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Annex E (informative): 

ME display in proactive SIIVI session 

Example of the ME display whilst the ME is in a proactive SIM session. 

ME display ME 

[Setup menu being navigated] 



Setup 
Menu list 



Select 
Item list 



Get 
In key 



ME 
Display 



Envelope (Menu Selection) 



SW = 91 XX 



Fetch 



Select Item 



Terminal Response 



SW = 91 XX 



Fetch 



Get Inkey 



Terminal Response 



SW = 90 00 



SIM 
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Annex F (informative): 

Help information feature processing 



The following example shows the use of the commands Menu Selection / Select Item and Get Input in conjunction with 
the help information feature. 



ME 

TFRMIMAI PROFII F 




SIM 

91 XX 




< 


PPTPI-I 




qpT 1 IP N/IFMI 1 CHpIn a\/ailahlp\ 










TFRK/IIMAI RFC:pnMC:F inw\ 




Qn nn 










FMVFI nPF CMFMI 1 ciFI FPTIOM 




91 XX 


help on menu item m) 


< 


FPTPI-I 




niQpi AV TFYT CHpIn infn tn itpm m\ 










TFRMIMAI RFCIPDMCIF CDK^ 




qn nn 


(ME offers menu again and user 
selects item m) 

FM\/FI nPF CMFMI 1 ciFI FPTIOM 






91 XX 

qpi PPT ITFN/l 


select item m) 

ppxpu 


< 








(Item list under item m, help available) 


TFRMIMAI RFC:PnMC:F 




91 XX 


(Help on item mn in item list under 
item m ) 


< 


FPTpLi 




DISPLAY TEXT (Help info to item mn) 








TFRMIMAI RFCiPOMCiF {n[<\ 




91 XX 




< 


FFTPH 




Ronptitinn nf QFI FPT ITFK/I 


FFTPH 




< 


(Item list under item m, help available) 
91 XX 

PPT IMP! IT 










TFRK/IIMAI RFC^PHMCiF 




91 XX 


(Help info required) 


< 


FFTPH 




nic;PI AY TFYT CHpJn infn^ 










TFRK/IIMAI RFC:pnMC:F (n[<\ 




91 XX 




< 


FFTPH 




Ronotitinn nf PFT IMPl IT 










TFRK/IIMAI RFC:pnMC:F (n[<\ 
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Annex G (informative): 
Monitoring of events 



Some of the events monitored through the event download mechanism are reported by the mobile each time the event 
occurs, while other events are reported only once (the ME removes the event type from the current event list once the 
event occurs). This is summarised in the table below: 



Event 


Continuously reported 


Reported once 


MTcall 


X 




Call connected 


X 




Call disconnected 


X 




Location status 


X 




User activity 




X 


Idle screen available 




X 


Card reader status (for class "a" only) 


X 




Language selection 


X 




Data available (for class "e" only) 


X 




Channel status (for class "e" only) 


X 




Browser termination (for class "c" only) 


X 
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Annex H (normative): 

Support of Multiple Card Operation 

This annex applies only if class "a" is supported. 

It is intended that MultipleCard commands are an optional extension to the basic SAT functionality in the present 
document. 

The ME is responsible for appropriate protocol management, as defined in ISO/IEC 7816-4 [24]. This includes APDU 
mapping and procedure byte handling. 

If the ME is already powered on and a SIM is active, then, when Card x is inserted, the ME powers on Card x. The ME 
shall identify if Card x contains the GSM application. If it does, TS 02. 17 [25] applies. If it does not contain the GSM 
application, or it is not selected by the user for GSM operation, then the ME powers off Card x. If applicable, the ME 
shall send an event download (card reader status) message to the current SIM. When required, the SAT application of 
the current SIM card shall power on Card x and control communications, through the relevant proactive commands. 

When the ME is powered on, the ME locates and selects the preferred SIM card defined in TS 02. 17 [25]. If applicable, 
the ME sends a Terminal Profile command to the SIM. When required, the SAT application issues a Get Reader Status 
proactive command, which gets information on all readers and cards available to the SAT application. This procedure 
also applies if the ME is already powered on with no SIM present, and a card is then inserted. 

When the SIM issues a POWER ON CARD, and the ME successfully receives an Answer To Reset from Card x, the 
ME shall return a successful Terminal Response containing the ATR, even if it does not understand the contents of the 
ATR, or support any of the protocols indicated. 

The ME shall ensure that Card x is deactivated according to ISO/IEC 7816-3 [16]. Where deactivation is not due to a 
POWER OFF CARD proactive command (e.g. card removed, card reader removed, or low battery), the event download 
(card reader status) procedure may also be applicable. 
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Annex I (informative): 

Multiple Card proactive command examples 

This annex applies only if class "a" is supported. 



SIM 



ME 



Card-x 



PERFORM CARD APDU 

PERFORM CARD APDU > 

< Terminal Response (R-APDU) 

POWER OFF CARD 

POWER OFF CARD > 

< Terminal ResponseQ 

POWER ON CARD 

POWER ON CARD > 



i Terminal Response (ATR) 

POWER ON CARD > 



i Terminal Response (ATR) 

GET READER STATUS 

GET READER STATUS > 



-Terminal Response (Status of card reader(s)) 



C-APDU > 

< R-APDU 



Deactivate Card x - 



Activate and Reset Card x > 

< Answer to Reset 



Reset Card x > 

< Answer to Reset 



IVIE scans all possible card reader interfaces 
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Annex J (informative): 

Bearer independent protocol proactive command examples 

This annex applies only if class "e" is supported. 



SIM 



ME 



Network 



OPEN CHANNEL 'immediate link 
establishment' 

OPEN CHANNEL (immediate) — 



< Terminal Response (Cliannel identifier) 

OPEN CHANNEL On demand link 
establishment' and SEND DATA 
'immediately' 

OPEN CHANNEL (on demand) > 

< Terminal Response (Cliannel identifier) 

SEND DATA (immediate, Data) > 



i Terminal Response (Channel Data Length) 

OPEN CHANNEL On demand link 
establishment' and SEND DATA 'Stored in 
Tx buffer' 

OPEN CHANNEL (on demand) > 

< Terminal Response (Channel identifier) 

SEND DATA (Store, Data) > 

i Terminal Response (Channel Data Length) 

SEND DATA (Store, Data) > 

i Terminal Response (Channel Data Length) 



SEND DATA (Immediate, Data) > 

i Terminal Response (Channel Data Length) 

CLOSE CHANNEL 

CLOSE CHANNEL(Channel identifier) > 

< Terminal Response(OK) 



Set Up Call > 

i OK 



Set Up Call > 

i OK 

Data > 



Set Up Call > 

i OK 

Data > 

Data > 



Terminate call > 

i OK 
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RECEIVE DATA 



< ENVELOPE (Data available) 

RECEIVE DATA (Channel Data length) > 

< Terminal Response(Data<=Length) 



SEND DATA 'immediately' 

SEND DATA (Immediate, Data) > 

< Terminal Response(Channel Data length) 

SEND DATA 'Stored in Tx Buffer' 

SEND DATA (Store, Data) > 

< Terminal Response(Channel Data length) 

SEND DATA (Store, Data) > 

< Terminal Response(Channel Data length) 



SEND DATA (Immediate, Data) > 

< Terminal Response(Channel Data length) 

GET CHANNEL STATUS 

GET CHANNEL STATUS > 

i Terminal Response (Channel status) 



i Data 



Data > 



Data > 



1 Channel available 



Example for GPRS bearer: 



ICC 



ME 



SGSN 



OPEN CHANNEL 

OPEN CHANNEL (immediate. 
Bearer description(bearertype=GPRS, OoS, PDP 

type=IP), 

Buffer size, APN, SIM/ME interface transport level 

(UDP, port p ), data destination address) > 



i Terminal Response (Channel identifier, link 

established, no further information, buffer size) 

CLOSE CHANNEL 

CLOSE CHANNEL(Channel identifier) > 

i Terminal Response(OK) 



Attach request > 

i Attach accept 

Activate PDP context Request (Requested PDP 
address, QoS, APN, PDP Type > 

i Activate PDP context Accept (PDP address, 

negotiated QoS, PDP type) 



Deactivate PDP context request > 

i Deactivate PDP context accept 
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RECEIVE DATA 



< ENVELOPE (Data available) 

RECEIVE DATA (Channel Data length) > 

i Terminal Response(Channel Data Length, 

Data<=Length) 

RECEIVE DATA (Channel Data length) > 

i Terminal Response(Channel Data Length, 

Data<=Length) 



RECEIVE DATA (Channel Data length) > 

< Terminal Response(Channel Data Length = 0, 

Data<=Length) 



Data (one complete SDU received) 



SEND DATA 'Stored in Tx Buffer' 

SEND DATA (Store, Data) 



< Terminal Response(Channel Data length) 

SEND DATA (Store, Data) > 

< Terminal Response(Channel Data length) 



SEND DATA (Immediate, Data) > 

< Terminal Response(Channel Data length = 0) 



GET CHANNEL STATUS 

GET CHANNEL STATUS > 

i Terminal Response (Channel status) 



Data- 



1 Channel available 
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Annex K (informative): 
WAP References 



Informative WAP references: 

WAP specifications: URL : http://www.wapforum.org/ 

WAP Smart card provisioning specification: URL : http://www.wapforum.org/ 

Definitions: 

WAE User Agent : any software or device that interprets WML, WMLScript. 

WMLScript : a scripting language used to run a program in the mobile device. 

Abbreviations: 

WAE Wireless Application Environment 

WAP Wireless Application Protocol 

WML Wireless Markup Language 
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Annex L (informative): 
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98p377 


A103 




R98 


F 


Clarification of the '93 00' status response handling 


98-0670 


98p378 


A104 




R98 


B 


New command - SETUP IDLE MODE TEXT 


98-0670 


98p3e9 


A108 




R98 


C 


Handling of DTMF in SETUP CALL command 


98-0670 


98p389 


Alio 




R98 


F 


Interaction between call control by SIM / MO short message control 
and proactive commands 


98-0605 




A111 


4 


R98 


B 


Enhancement to Proactive SIM that enables the SIM to issue AT 
commands 


s28 


P-99-185 


98p448 


7.1.0 


A085 


3 


R98 


B 


Addition of a second alpha identifier to SET UP CALL 


7.2.0 


P-99-185 


98p432 


A114 




R98 


A 


Clarification about USSD Return Result parameters in Terminal 
Response 


P-99-185 


98p451 


All 5 




R98 


F 


Call Control: Modified user request beyond ME's capabilities 


P-99-185 


9-99-045 


A116 




R98 


C 


Display of the items on the ME screen 


P-99-185 


9-99-054 


A117 




R98 


C 


USSD string coding 


P-99-185 


9-99-060 


A120 




R98 


A 


Configuration parameters 


P-99-185 


9-99-071 


A121 




R98 


D 


USSD and call control Call 


P-99-185 


9-99-073 


A122 




R98 


F 


Call control: Two bearer capability with BC repeat indicator 


P-99-185 


9-99-078 


A123 




R98 


F 


Clarification to PROVIDE LOCAL INFO regarding NMR 


P-99-185 


9-99-070 


A124 




R98 


B 


Sustained DISPLAY TEXT command 


P-99-185 


9-99-085 


A126 




R98 


D 


Clarification to PROVIDE LOCAL INFO (NMR in idle mode) 


P-99-185 


9-99-090 


A127 




R98 


F 


Correction of reply to SEND USSD 


P-99-185 


9-99-089 


A129 




R98 


B 


New proactive command "SEND_DTMF" 


P-99-188 




A132 




R98 


D 


Deletion of $( )$ release markers 


P-99-188 




A134 




R98 


D 


Deletion of references to class 1 and class 2 


P-99-188 




A135 




R98 


D 


Incorporation of timer feature into class 3 
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History table (continued) 



Meet 
ing# 


Plenary 
tdoc 


WG 
tdoc 


VERS 


CR 


RV 


PH 


CAT 


SUBJECT 


Resulting 
Version 


s29 


P-99-413 


9-99-162 


7.2.0 


A128 


5 


R98 


c 


EF IMSI changes via data download or SIM toolkit application 


8.0.0 


P-99-413 


9-99-197 


A140 




R98 


F 


Clarification of TERMINAL RESPONSE in the case of an empty 
GET INPUT command 


P-99-541 




A141 


1 


R98 


F 


Correction of BCCH channel list in Network Measurement Results 


P-99-413 


9-99-209 


A142 




R98 


F 


GET INKEY "Yes/No" shall not define keyboard mapping 


P-99-413 


9-99-164 


A136 




R99 


C 


Language indication for PROVIDE LOCAL INFORMATION and 
event driven information 


P-99-413 


9-99-210 


A137 


1 


R99 


C 


Timing Advance in PROVIDE LOCAL INFO 


P-99-413 


9-99-179 


A138 




R99 


c 


New response "limited service" in PROVIDE LOCAL INFO 






8.0.0 










Version 8.0.1 was produced as a result of a mistake made in the 
coding of the TERMINAL PROFILE during the production of 
V8.0.0 


8.0.1 


s30 


P-99-671 


9-99-306 


8.0.1 


A143 


2 


R99 


B 


New command: Language notification for SIM to notify ME about 
selected SIM Application Toolkit language 


8.1.0 


P-99-671 


9-99-295 


A144 




R99 


D 


Removal of numerical toolkit classes 


P-99-671 


9-99-289 


A145 




R99 


F 


Clarification of the '6F XX' response 


P-99-671 


9-99-301 


A146 




R99 


D 


Execution time of SIM toollkit procedures 


s31 


P-00-138 


9-00-0101 


8.1.0 


A149 




R99 


F 


Correction on Transaction identifier tag 


8.2.0 


P-00-138 


9-00-0141 


A150 




R99 


B 


Addition of EIAATIA-136 Teleservice Delivery 


P-00-138 


9-00-0109 


A151 




R99 


F 


Clarification to service modification by Call Control 


P-00-138 


9-00-0110 


A152 




R99 


F 


Correction to result value "USSD transaction terminated by user" 


P-00-138 


9-00-0111 


A153 




R99 


F 


Call Control and automatic redial mode 


P-00-138 


9-00-0138 


A155 




R99 


C 


Addition of soft keys support for SELECT ITEM. 


P-00-138 


9-00-0140 


A157 




R99 


C 


Addition of soft keys support for SET UP MENU 


P-00-138 


9-00-0142 


A158 




R99 


B 


Addition of SAT commands for bearer independent protocol 


P-00-138 


9-00-0143 


A159 




R99 


B 


Addition of GPRS data bearer for bearer independent protocol 


P-00-138 


9-00-0144 


A160 




R99 


B 


New proactive Command : LAUNCH BROWSER 


P-00-138 


9-00-0145 


A161 




R99 


F 


Correction on Allowed Type of command and Device identity 
combinations 


P-00-138 


9-00-0150 


A162 




R99 


F 


MORE TIME usage clarification 


P-00-138 


9-00-0156 


A163 




R99 


B 


Display parameters in Profile download 


P-00-138 


9-00-0157 


A164 




R99 


C 


Get Reader Status : card reader identifier 






8.2.0 










The additions of CR A160 to subclause 6.6.26 were not correctly 
implemented in version 8.2.0. This is rectified in version 8.2.1 . 


8.2.1 


s32 


P-00-297 


9-00-0220 


8.2.1 


A168 




R99 


A 


Correction of references in SET UP IDLE MODE TEXT 


8.3.0 


P-00-297 


9-00-0243 


A169 




R99 


A 


Icon identifiers handling 


P-00-297 


9-00-0245 


A170 




R99 


D 


Addition of tag values 


P-00-297 


9-00-0267 


A172 


1 


R99 


A 


Correction of SELECT ITEM 


P-00-297 


9-00-0265 


A173 




R99 


F 


Addition of health warning ME storage on input 


P-00-297 


9-00-0270 


A174 




R99 


F 


Correction to display parameters in profile download 


P-00-297 


9-00-0197 


A175 




R99 


A 


Correction of reference in REFRESH description 


P-00-297 


9-00-0272 


A176 




R99 


F 


Get Reader Status : correction to card reader identifier tag 


P-00-297 


9-00-0281 


A177 




R99 


F 


Correction of SAT commands for using GPRS in bearer 
independent protocol feature 


P-00-297 


9-00-0280 


A178 




R99 


F 


Clarification of ME/SIM interface for bearer independent protocol 


Following the closure of ETSI SMG and the agreement of the 3GPP in July 2000 to undertake responsibility for remaining 
GSM specifications, the change requests listed below were approved by 3GPP TSG-T. This change in responsibility also 
changed the specification number from "GSM 1 1. 14" to "3GPP TS 1 1. 14". 


TP-09 


TP-000149 


T3-000473 


8.3.0 


A184 




R99 


F 


Clarification for Alpha Identifier in PLAY TONE 


8.4.0 


TP-000149 


T3-000485 


A186 




R99 


F 


EVENT DOWNLOAD-MT call : correction of the sub-address 
description 


TP-000149 


T3-000468 


A188 




R99 


F 


correction to GET INPUT regarding number of response string 
variables 


TP-10 


TP-000202 


T3-000641 


8.4.0 


A189 


2 


R99 


F 


Clarification of bearer independent related to GPRS 


8.5.0 


TP-000202 


T3-000644 


A190 


1 


R99 


F 


Correction to device identity coding 


TP-000202 


T3-000647 


A191 




R99 


F 


Clarification of command qualifier related to LAUNCH BROWSER 


TP-000202 


T3-000618 


A192 




R99 


F 


Modification of general result for proactive command with user 
confirmation 


TP-000202 


T3-000634 


A193 




R99 


F 


General Clarification and Corrections 


TP-11 


TP-010039 


T3-010209 


8.5.0 


A194 




R99 


F 


Correction of Annex A; Support of USAT by Mobile Equipment 


8.6.0 
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Meet 
ing# 


Plenary 
tdoc 


WG 
tdoc 


VERS 


CR 


RV 


PH 


CAT 


SUBJECT 


Resulting 
Version 


TP-12 


TP-010151 


T3-010416 


8.6.0 


A196 




R99 


A 


Clarification of min and max length: for GET INPUT 


8.7.0 


TP-010151 


T3-010420 


A198 




R99 


A 


Limitation of data field in tfie C-APDU and R-APDU data object 


TP-010151 


T3-0 10424 


A200 




R99 


A 


REFRESH-SIM Initialization : correction of a reference 


TP-010151 


T3-010449 


A201 




R99 


F 


Correction of Annex J (Bearer independant protocol examples) 


TP-13 


TP-010202 


T3-010601 


8.7.0 


A202 




R99 


F 


Addition of TIA/EIA 136 byte to terminal profile 


8.8.0 


TP-010202 


T3-010600 


A203 




R99 


F 


Alignment of 11.14witfi 31.111 regarding interaction between 
FDN, SEND SMS and SEND SS 


TP-010202 


T3-010605 


A204 




R99 


F 


Alignment witfi 31.111 


TP-010202 


T3-010606 


A205 




R99 


F 


Corrections to OPEN CHANNEL commands 


TP-010202 


T3-010609 


A206 




R99 


F 


TLV object for tfie APN in tfie OPEN CHANNEL command 


TP-010202 


T3-010615 


A207 




R99 


F 


Corrections to SEND DATA commands and Channel Status 
Event 


TP-14 


TP-010243 


T3-010758 


8.8.0 


A208 




R99 


F 


Miscellanous corrections 


8.9.0 


TP-15 


TP-020064 


T3-020110 


8.9.0 


A209 




R99 


F 


Correction of Channel Status Simple TLV Tag Value 


8.10.0 


TP-16 


TP-020111 


T3-020353 


8.10.0 


A210 




R99 


F 


Correction of Terminal Response references 


8.11.0 




T3-020367 


A211 




R99 


F 


Correction to OPEN CHANNEL for GPRS 


TP-18 


TP-020282 


T3-020876 


8.11.0 


A212 




R99 


F 


Allow ME to reject Set Up Call with Called Party Subaddress 
when feature is not supported in ME and correction of a 
reference in the SET UP IDLE MODE TEXT TLV 


8.12.0 


T3-020877 




A213 




R99 


F 


Clarification of the usage of busy status response for Cell 
Broadcast, Event download and Menu Selection Envelope. 


T3-020908 




A214 




R99 


F 


Clarification on Default Bearer Description 


TP-19 


TP-030020 


T3-030170 


8.12.0 


A216 




R99 


F 


Correction to the lack of specified behaviour when the link drops 
in Bearer Independent Protocol. 


8.13.0 


TP-20 


TP-030117 


T3-030403 


8.13.0 


A217 




R99 


F 


Correction of Item Icon Identifier list coding example 


8.14.0 


TP-22 


TP-030249 


T3-030986 


8.14.0 


A218 




R99 


F 


Clarification on user confirmation for OPEN CHANNEL 


8.15.0 


TP-23 


TP-040022 


T3-040117 


8.15.0 


A219 




R99 


F 


Clarification of Alpha Identifier for BIP commands 


8.16.0 



£75/ 



3GPP TS 11 .1 4 version 8.1 6.0 Release 1 999 



139 



ETSI TS 101 267 V8.16.0 (2004-03) 



History 


Document history 


V8.2.0 


May 2000 


Publication 


V8.2.1 


June 2000 


Publication 


V8.3.0 


August 2000 


Publication 


V8.4.0 


October 2000 


Publication 


V8.5.0 


December 2000 


Publication 


V8.6.0 


March 2001 


Publication 


V8.7.0 


June 2001 


Pubhcation 


V8.8.0 


September 2001 


Publication 


V8.9.0 


December 2001 


Publication 


V8.10.0 


March 2002 


Publication 


V8.11.0 


June 2002 


Publication 


V8.12.0 


December 2002 


Publication 


V8.13.0 


March 2003 


Publication 


V8.14.0 


June 2003 


Publication 


V8.15.0 


December 2003 


Pubhcation 


V8.16.0 


March 2004 


Publication 



£75/ 



